CVE-2007-2738

2007-05-1719:00:00

mitre

www.cve.org

AI Score

8.4

Confidence

Low

EPSS

0.006

Percentile

78.2%

JSON

SQL injection vulnerability in glossaire-p-f.php in the Glossaire 1.7 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the sid parameter in an ImprDef action.

References

osvdb.org/37921

www.securityfocus.com/bid/23998

www.vupen.com/english/advisories/2007/1829

exchange.xforce.ibmcloud.com/vulnerabilities/34308

www.exploit-db.com/exploits/3932