CVE-2007-1979

CVE-2007-1979 refers to an SQL injection in the PopnupBlog module for XOOPS (index.php) up to version 2.52 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands via the postid parameter, potentially involving get_blogid_from_postid in class/PopnupBlogUtils.php. ...