CVE-2007-5458

no score yetEPSS 0.9%

alorys-hebergement: no CVSS score yet. EPSS 0.9% chance of exploitation in the next 30 days.

SQL injection vulnerability in index.php in the newsletter module 1.0 for KwsPHP, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the newsletter parameter.

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2007-10-14
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

alorys-hebergement:kwsphp
alorys-hebergement:newsletter_module

References

http://secunia.com/advisories/27219
http://www.securityfocus.com/bid/26051
https://exchange.xforce.ibmcloud.com/vulnerabilities/37083
https://www.exploit-db.com/exploits/4523
http://secunia.com/advisories/27219

Check your stack JSON