Unscored severity · published Sep 24, 2007
CVE-2007-5068
SQL injection vulnerability in index.php in phpFullAnnu (PFA) 6.0 allows remote attackers to execute arbitrary SQL commands via the mod parameter
–
CVSS
1%
EPSS
No
On KEV
Description
SQL injection vulnerability in index.php in phpFullAnnu (PFA) 6.0 allows remote attackers to execute arbitrary SQL commands via the mod parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PH
Phpfullannu · Phpfullannu
6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5068
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5068
www.osvdb.org
http://www.osvdb.org/38164
www.securityfocus.com
http://www.securityfocus.com/bid/25779
www.vupen.com
http://www.vupen.com/english/advisories/2007/3254
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/36747
www.exploit-db.com
https://www.exploit-db.com/exploits/4449
More from Phpfullannu
–
CVE-2006-4644
PHP remote file inclusion vulnerability in modules/home.module.php in phpFullAnnu 5.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the repmod…