Lucene search
HistoryApr 02, 2007 - 11:19 p.m.
CVE-2007-1806
cve-2007-1806
sql injection
categos.php
rm+soft gallery
rmgallery
xoops
remote attackers
arbitrary sql commands
idcat parameter
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
74.0%
SQL injection vulnerability in categos.php in the RM+Soft Gallery (rmgallery) 1.0 module for Xoops allows remote attackers to execute arbitrary SQL commands via the idcat parameter.
Affected configurations
Node
red_mexicorm\+soft_galleryMatch1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| red_mexico:rm\+soft_gallery | red mexico rm+soft gallery | eq | 1.0 |
Related
prion
prion
Sql injection
2007-04-02 23:19:00
nvd
nvd
CVE-2007-1806
2007-04-02 23:19:00
checkpoint_advisories
checkpoint_advisories
XOOPS Module RM and Soft Gallery SQL Injection (CVE-2007-1806)
2014-11-10 00:00:00
cvelist
cvelist
CVE-2007-1806
2007-04-02 23:00:00
securityvulns
securityvulns
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
74.0%
Related for CVE-2007-1806