CVE-2007-1979: SQL Injection
SQL injection vulnerability in index.php in the PopnupBlog 2.52 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the postid parameter, possibly involving the getblogidfrompostid function in class/PopnupBlogUtils.php. NOTE: later versions such as 3.03 and 3.05 might also be affected.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1979?
CVE-2007-1979 is considered a high severity vulnerability due to the potential for remote SQL injection attacks.
How do I fix CVE-2007-1979?
To fix CVE-2007-1979, upgrade to PopnupBlog version 3.03 or later, which addresses this vulnerability.
What type of attack does CVE-2007-1979 enable?
CVE-2007-1979 enables SQL injection attacks, allowing attackers to execute arbitrary SQL commands.
Which software versions are affected by CVE-2007-1979?
CVE-2007-1979 affects PopnupBlog versions 2.52 and earlier.
Where in the code is the vulnerability located in CVE-2007-1979?
The vulnerability in CVE-2007-1979 is located in the index.php file, specifically relating to the postid parameter.