Unscored severity · published May 9, 2007
CVE-2007-2543
SQL injection vulnerability in game.php in the Flashgames 1.0.1 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the lid parameter
–
CVSS
1.2%
EPSS
No
On KEV
Description
SQL injection vulnerability in game.php in the Flashgames 1.0.1 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the lid parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FM
Flashgames Module · Xoops
1.0.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2543
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2543
osvdb.org
http://osvdb.org/34472
Vendor Advisory
http://secunia.com/advisories/25155
Exploit
http://www.securityfocus.com/bid/23820
www.vupen.com
http://www.vupen.com/english/advisories/2007/1668
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/34076
www.exploit-db.com
https://www.exploit-db.com/exploits/3849