NVD

Id
54149  
Name
CVE-2007-1979  
Description
SQL injection vulnerability in index.php in the PopnupBlog 2.52 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the postid parameter, possibly involving the get_blogid_from_postid function in class/PopnupBlogUtils.php. NOTE: later versions such as 3.03 and 3.05 might also be affected.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-04-11  
Modified Date
2011-03-07  
Seq
2007-1979  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
274599 54149 CVE-2007-1979 3655  View
274600 54149 CVE-2007-1979 23286  View
274601 54149 CVE-2007-1979 ADV-2007-1206  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56700 JVNDB-2007-005392 XOOPS 用の PopnupBlog モジュールにおける SQL インジェクションの脆弱性 XOOPS 用の PopnupBlog モジュールの index.php は、class/PopnupBlogUtils.php 内の get_blogid_from_postid 関数に関する処理に不備があるため、SQL インジェクションの脆弱性が存在します。 CVE-2007-1979 25334 CVE-2007-1979 54149 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005392.html 2007-04-11 2012-12-20 View