high7.5Public exploit code
CVE-2007-1960
SQL injection vulnerability in visit.php in the Rha7 Downloads (rha7downloads) 1.0 module for XOOPS, and possibly other versions up to 1.10, allows remote atta…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- XOOPS Module Rha7 Downloads 1.0 - 'visit.php' SQL Injection2007-04-04 · webapps · php · Verified
Impact
SQL injection vulnerability in visit.php in the Rha7 Downloads (rha7downloads) 1.0 module for XOOPS, and possibly other versions up to 1.10, allows remote attackers to execute arbitrary SQL commands via the lid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xoops | Rha7 Downloads Module | Versions 1.0, 1.10 |