CVE-2007-1931

CVE-2007-1931 affects SmodCMS 2.10 and earlier: SQL injection in index.php (slownik module) via the ssid parameter. This allows remote attackers to execute arbitrary SQL commands. CVSSv2 base score 7.5 (HIGH; AV:N/AC:L/Au:N/C:P/I:P/A:P). Exploitation appears in public references (e.g., exploit-db...