CVE-2007-1807

CVE-2007-1807 involves an SQL injection in the myAlbum-P 2.0 and earlier module for Xoops, specifically in modules/myalbum/viewcat.php via the cid parameter. Remote attackers could potentially execute arbitrary SQL commands. The description confirms the vulnerable component (myAlbum-P module for ...