CVE-2007-5978: SQL Injection
Published Nov 15, 2007
·Updated
SQL injection vulnerability in brokenlink.php in the mylinks module for XOOPS allows remote attackers to execute arbitrary SQL commands via the lid parameter.
Affected Software
1 affected component
Xoops mylinks module=2.0.17.1
Event History
Nov 15, 2007
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-5978?
CVE-2007-5978 has a moderate severity level as it allows for SQL injection that could lead to data compromise.
2
How do I fix CVE-2007-5978?
To fix CVE-2007-5978, update the mylinks module for XOOPS to version 2.0.17.2 or later.
3
What systems are affected by CVE-2007-5978?
CVE-2007-5978 affects the mylinks module for XOOPS version 2.0.17.1 specifically.
4
What type of vulnerability is CVE-2007-5978?
CVE-2007-5978 is an SQL injection vulnerability that permits remote execution of arbitrary SQL commands.
5
Can CVE-2007-5978 be exploited remotely?
Yes, CVE-2007-5978 can be exploited remotely by attackers through the lid parameter.