Login Request a demo
Unscored severity · published Apr 30, 2007
CVE-2007-2370
SQL injection vulnerability in index.php in the John Mordo Jobs 2.4 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in…
–
CVSS
2.9%
EPSS
No
On KEV
Description
SQL injection vulnerability in index.php in the John Mordo Jobs 2.4 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a jobsview action. NOTE: the module name was originally reported as Job Listings.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JM
John Mordo Jobs Module · Xoops
through 2.4 · source: NVD
Affected product
JM
John Mordo Jobs Module
Xoops
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2370
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2370
www.attrition.org
http://www.attrition.org/pipermail/vim/2007-April/001494.html
www.exploit-db.com
https://www.exploit-db.com/exploits/3672