Sql injection

2007-05-1719:30:00

PRIOn knowledge base

www.prio-n.com

8.8 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.0%

JSON

SQL injection vulnerability in index.php in the MyConference 1.0 module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CPENameOperatorVersion
myconference_moduleeq1.0

CPE	Name	Operator	Version
	myconference_module	eq	1.0

References

osvdb.org/37920

www.vupen.com/english/advisories/2007/1830