CVE-2007-2107

no score yetEPSS 1.0%

rha7 downloads rha7 downloads: no CVSS score yet. EPSS 1.0% chance of exploitation in the next 30 days.

SQL injection vulnerability in visit.php in the Rha7 Downloads (rha7downloads) 1.0 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2007-1960. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
Published: 2007-04-18
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

rha7_downloads:rha7_downloads

References

http://osvdb.org/37412
http://www.vupen.com/english/advisories/2007/1266
http://osvdb.org/37412
http://www.vupen.com/english/advisories/2007/1266

Check your stack JSON