Unscored severity · published Nov 15, 2007
CVE-2007-5978
SQL injection vulnerability in brokenlink.php in the mylinks module for XOOPS allows remote attackers to execute arbitrary SQL commands via the lid parameter
–
CVSS
1%
EPSS
No
On KEV
Description
SQL injection vulnerability in brokenlink.php in the mylinks module for XOOPS allows remote attackers to execute arbitrary SQL commands via the lid parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MM
Mylinks Module · Xoops
2.0.17.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5978
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5978
osvdb.org
http://osvdb.org/38747
securityreason.com
http://securityreason.com/securityalert/3362
www.securityfocus.com
http://www.securityfocus.com/archive/1/483525/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/26392
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/38370