CVE-2007-6667 SQL injection vulnerability in faq.php in MyPHP Forum 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the member.php vector is already covered by....
MediumCVSS 6.8
EPSS 0.96%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in faq.php in MyPHP Forum 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the member.php vector is already covered by CVE-2005-0413.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| myphp forum | <= 3.0 | No fix listed |
| myphp forum | = 1.0 | No fix listed |
| myphp forum | = 2.0 | No fix listed |
References
- 39781 vdb-entry
- 39782 vdb-entry
- 27083 exploit vdb-entry
- myphpforum-faq-sql-injection(39347) vdb-entry
- 4822 exploit