Unscored severity · published Feb 13, 2007
CVE-2007-0904
SQL injection vulnerability in projects.php in LightRO CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter to index.php
–
CVSS
1.1%
EPSS
No
On KEV
Description
SQL injection vulnerability in projects.php in LightRO CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter to index.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LC
Lightro Cms · Lightro
1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0904
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0904
osvdb.org
http://osvdb.org/34598
www.vupen.com
http://www.vupen.com/english/advisories/2007/0540
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/32347
www.exploit-db.com
https://www.exploit-db.com/exploits/3286
More from Lightro Cms
–
CVE-2007-0824
PHP remote file inclusion vulnerability in inhalt.php in LightRO CMS 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the dateien[news] parameter