CVE-2007-1960: SQL Injection
SQL injection vulnerability in visit.php in the Rha7 Downloads (rha7downloads) 1.0 module for XOOPS, and possibly other versions up to 1.10, allows remote attackers to execute arbitrary SQL commands via the lid parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1960?
CVE-2007-1960 is considered to be a high severity SQL injection vulnerability.
How do I fix CVE-2007-1960?
You can fix CVE-2007-1960 by updating the Rha7 Downloads module for XOOPS to the latest version that addresses this issue.
What software is affected by CVE-2007-1960?
CVE-2007-1960 affects the Rha7 Downloads module for XOOPS, specifically versions 1.0 to 1.10.
What are the consequences of exploiting CVE-2007-1960?
Exploiting CVE-2007-1960 can allow remote attackers to execute arbitrary SQL commands, potentially compromising the application's database.
Is there a known mitigation for CVE-2007-1960?
A known mitigation for CVE-2007-1960 includes input validation and parameterized queries to prevent SQL injection.