CVE-2007-1805

Published: Apr 2, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in genre.php in the debaser 0.92 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the genreid parameter.

Affected (1)

Products: Myxoops: Debaser

Myxoops

1 product

Debaser

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Myxoops Debaser	version ≤ 0.92

References (8)

http://osvdb.org/34466

Source: cve@mitre.org

http://www.securityfocus.com/bid/23253

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/33372

Source: cve@mitre.org

https://www.exploit-db.com/exploits/3630

Source: cve@mitre.org

http://osvdb.org/34466

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/23253

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/33372

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/3630

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.