CVE-2007-1920

EPSS 1.2%

SQL injection vulnerability in index.php in the aktualnosci module in SmodBIP 1.06 and earlier allows remote attackers to execute arbitrary SQL commands via the zoom parameter, possibly related to home.php.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/3678unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/34745 http://secunia.com/advisories/24802 https://exchange.xforce.ibmcloud.com/vulnerabilities/33476 https://www.exploit-db.com/exploits/3678 http://www.securityfocus.com/bid/23356 http://www.vupen.com/english/advisories/2007/1298