CVE-2007-5646: SQL Injection
SQL injection vulnerability in Sources/Search.php in Simple Machines Forum (SMF) 1.1.3, when MySQL 5 is used, allows remote attackers to execute arbitrary SQL commands via the userspec parameter in a search2 action to index.php.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-5646?
CVE-2007-5646 is considered a high severity SQL injection vulnerability that could allow remote attacks to execute arbitrary SQL commands.
How do I fix CVE-2007-5646?
Fixing CVE-2007-5646 involves upgrading to a patched version of Simple Machines Forum or modifying the script to sanitize user input properly.
What applications are affected by CVE-2007-5646?
CVE-2007-5646 affects Simple Machines Forum version 1.1.3 and potentially other versions that utilize MySQL 5.
What are the potential impacts of exploiting CVE-2007-5646?
Exploitation of CVE-2007-5646 can lead to unauthorized access to database information, data manipulation, or full control of the database.
Is CVE-2007-5646 still a concern today?
While CVE-2007-5646 was reported in 2007, systems still running vulnerable versions of Simple Machines Forum are at risk and should be updated.