CVE-2007-1974

Published: Apr 12, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in the getArticle function in class/wfsarticle.php in WF-Section (aka WF-Sections) 1.0.1, as used in Xoops modules such as (1) Zmagazine 1.0, (2) Happy Linux XFsection 1.07 and earlier, and possibly other modules, allows remote attackers to execute arbitrary SQL commands via the articleid parameter to print.php.

Affected (3)

Products: Wf Sections: Wf Sections · Xoops: Happy Linux Xfsection Module, Zmagazine Module

1 product

2 products

Happy Linux Xfsection Module

Zmagazine Module

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Wf Sections Wf Sections	Version 1.0.1
Xoops Happy Linux Xfsection Module	Up to 1.07
Xoops Zmagazine Module	Version 1.0

References (38)

http://addons.zarilia.com/index.php?page_type=static&id=43

Source: cve@mitre.org

Patch

http://osvdb.org/41387

Source: cve@mitre.org

http://osvdb.org/52230

Source: cve@mitre.org

http://www.attrition.org/pipermail/vim/2007-April/001507.html

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/archive/1/488317/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/23258

Source: cve@mitre.org

http://www.securityfocus.com/bid/23259

Source: cve@mitre.org

http://www.securityfocus.com/bid/23261

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1207

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1208

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1209

Source: cve@mitre.org

http://www.xoops.org/modules/newbb/viewtopic.php?viewmode=flat&order=ASC&topic_id=58229&forum=4&move=next&topic_time=1176217411

Source: cve@mitre.org

Vendor Advisory

http://www.xoops.org/modules/news/article.php?storyid=3717

Source: cve@mitre.org

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/33378

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/33379

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/33380

Source: cve@mitre.org

https://www.exploit-db.com/exploits/3644

Source: cve@mitre.org

https://www.exploit-db.com/exploits/3645

Source: cve@mitre.org

https://www.exploit-db.com/exploits/3646

Source: cve@mitre.org

http://addons.zarilia.com/index.php?page_type=static&id=43

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://osvdb.org/41387

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/52230

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.attrition.org/pipermail/vim/2007-April/001507.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/archive/1/488317/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/23258

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/23259

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/23261

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/1207

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/1208

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/1209

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.xoops.org/modules/newbb/viewtopic.php?viewmode=flat&order=ASC&topic_id=58229&forum=4&move=next&topic_time=1176217411

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.xoops.org/modules/news/article.php?storyid=3717

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/33378

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/33379

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/33380

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/3644

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/3645

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/3646

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.