Unscored severity · published Apr 12, 2007
CVE-2007-1979
SQL injection vulnerability in index.php in the PopnupBlog 2.52 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the postid parameter,…
–
CVSS
2.2%
EPSS
No
On KEV
Description
SQL injection vulnerability in index.php in the PopnupBlog 2.52 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the postid parameter, possibly involving the get_blogid_from_postid function in class/PopnupBlogUtils.php. NOTE: later versions such as 3.03 and 3.05 might also be affected.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
XP
Xoops Popnupblog · Xoops
through 2.52 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1979
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1979
Vendor Advisory
http://secunia.com/advisories/24761
Exploit
http://www.securityfocus.com/bid/23286
www.vupen.com
http://www.vupen.com/english/advisories/2007/1206
www.exploit-db.com
https://www.exploit-db.com/exploits/3655