CVE-2007-0847

Published: Feb 8, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in mod/PM/reply.php in Open Tibia Server CMS (OTSCMS) 2.1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to priv.php.

Affected (4)

Products: Open Tibia Server Cms: Open Tibia Server Cms

Open Tibia Server Cms

1 product

Open Tibia Server Cms

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Open Tibia Server Cms Open Tibia Server Cms	Version 2.0
Open Tibia Server Cms Open Tibia Server Cms	Version 2.1.3
Open Tibia Server Cms Open Tibia Server Cms	Version 2.1.4
Open Tibia Server Cms Open Tibia Server Cms	Version 2.1.5