CVE-2007-2370: SQL Injection
SQL injection vulnerability in index.php in the John Mordo Jobs 2.4 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a jobsview action. NOTE: the module name was originally reported as Job Listings.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2370?
CVE-2007-2370 is considered a high severity vulnerability due to its ability to allow remote attackers to execute arbitrary SQL commands.
How do I fix CVE-2007-2370?
To fix CVE-2007-2370, upgrade to a newer version of the John Mordo Jobs module that addresses the SQL injection vulnerability.
Which versions of the John Mordo Jobs module are affected by CVE-2007-2370?
CVE-2007-2370 affects the John Mordo Jobs module versions 2.4 and earlier for XOOPS.
What type of vulnerability is CVE-2007-2370?
CVE-2007-2370 is classified as an SQL injection vulnerability that can be exploited through the cid parameter.
Can CVE-2007-2370 be exploited remotely?
Yes, CVE-2007-2370 can be exploited remotely, allowing attackers to execute SQL commands on the target server.