Unscored severity · published Apr 3, 2007
CVE-2007-1846
SQL injection vulnerability in index.php in the MyAds 2.04jp and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter,…
–
CVSS
2.2%
EPSS
No
On KEV
Description
SQL injection vulnerability in index.php in the MyAds 2.04jp and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter, different vectors than CVE-2006-3341.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MS
Malaika System Myads Module · Xoops
through 2.04 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1846
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1846
osvdb.org
http://osvdb.org/37372
Exploit
http://www.securityfocus.com/bid/23212
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/33334
www.exploit-db.com
https://www.exploit-db.com/exploits/3603