CVE-2007-2543

EPSS 1.2%

SQL injection vulnerability in game.php in the Flashgames 1.0.1 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the lid parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/3849unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/34472 http://secunia.com/advisories/25155 https://exchange.xforce.ibmcloud.com/vulnerabilities/34076 https://www.exploit-db.com/exploits/3849 http://www.securityfocus.com/bid/23820 http://www.vupen.com/english/advisories/2007/1668