CVE-2007-5688: SQL Injection
Multiple SQL injection vulnerabilities in directory.php in the Multi-Forums (aka Multi Host Forum Pro) module 1.3.3, for phpBB and Invision Power Board (IPB or IP.Board), allow remote attackers to execute arbitrary SQL commands via the (1) go and (2) cat parameters.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-5688?
CVE-2007-5688 is considered a high severity vulnerability due to the potential for remote attackers to execute arbitrary SQL commands.
How do I fix CVE-2007-5688?
To fix CVE-2007-5688, upgrade the Multi-Forums module to a version that has addressed the SQL injection vulnerabilities.
Which software is affected by CVE-2007-5688?
CVE-2007-5688 affects the Multi-Forums module version 1.3.3 for phpBB and Invision Power Board (IPB or IP.Board).
What type of vulnerability is CVE-2007-5688?
CVE-2007-5688 is classified as a SQL injection vulnerability.
Can CVE-2007-5688 be exploited remotely?
Yes, CVE-2007-5688 allows remote attackers to exploit the vulnerability and execute SQL commands.