CVE-2007-1979

no score yetEPSS 2.2%

xoops xoops popnupblog: no CVSS score yet. EPSS 2.2% chance of exploitation in the next 30 days.

SQL injection vulnerability in index.php in the PopnupBlog 2.52 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the postid parameter, possibly involving the get_blogid_from_postid function in class/PopnupBlogUtils.php. NOTE: later versions such as 3.03 and 3.05 might also be affected.

EPSS: 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-11-01)
Published: 2007-04-12
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

xoops:xoops_popnupblog

References

http://secunia.com/advisories/24761
http://www.securityfocus.com/bid/23286
http://www.vupen.com/english/advisories/2007/1206
https://www.exploit-db.com/exploits/3655
http://secunia.com/advisories/24761

Check your stack JSON