Vulnerability Details CVE-2007-5978
SQL injection vulnerability in brokenlink.php in the mylinks module for XOOPS allows remote attackers to execute arbitrary SQL commands via the lid parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 53.4%
CVSS Severity
CVSS v2 Score 7.5
References
- http://osvdb.org/38747
- http://securityreason.com/securityalert/3362
- http://www.securityfocus.com/archive/1/483525/100/0/threaded
- http://www.securityfocus.com/bid/26392
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38370
- http://osvdb.org/38747
- http://securityreason.com/securityalert/3362
- http://www.securityfocus.com/archive/1/483525/100/0/threaded
- http://www.securityfocus.com/bid/26392
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38370
Products affected by CVE-2007-5978
-
cpe:2.3:a:xoops:mylinks_module:2.0.17.1