high7.5
CVE-2007-4107
SQL injection vulnerability in editpost.php in phpMyForum before 4.1.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Impact
SQL injection vulnerability in editpost.php in phpMyForum before 4.1.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: some of these details are obtained from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpmyforum | Phpmyforum | through 4.1.3 |
References
- NVD record
- CVE.org record
- http://osvdb.org/36276
- http://secunia.com/advisories/26156
- http://support.phpmyforum.de/topic.php?id=4665
- http://support.phpmyforum.de/topic.php?id=4669
- http://www.securityfocus.com/bid/25009
- http://www.vupen.com/english/advisories/2007/2609
- http://osvdb.org/36276
- http://secunia.com/advisories/26156
- http://support.phpmyforum.de/topic.php?id=4665
- http://support.phpmyforum.de/topic.php?id=4669
- http://www.securityfocus.com/bid/25009
- http://www.vupen.com/english/advisories/2007/2609