Unscored severity · published Apr 3, 2007
CVE-2007-1847
SQL injection vulnerability in viewcat.php in the Repository module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter
–
CVSS
1.3%
EPSS
No
On KEV
Description
SQL injection vulnerability in viewcat.php in the Repository module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RM
Repository Module · Xoops
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1847
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1847
osvdb.org
http://osvdb.org/37373
Exploit
http://www.securityfocus.com/bid/23221
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/33344
www.exploit-db.com
https://www.exploit-db.com/exploits/3612