CVE-2007-2107

CVE-2007-2107 describes an SQL injection in the Rha7 Downloads (rha7downloads) 1.0 module for XOOPS, triggered via the cid parameter in visit.php. The vulnerability arises from processing user-supplied input without proper sanitization, allowing remote attackers to potentially modify or exfiltrat...