CVE-2007-4210

Multiple SQL injection vulnerabilities in module.php in LANAI (la-nai) CMS 1.2.14 allow remote attackers to execute arbitrary SQL commands via (1) the mid…

published August 8, 2007

CVSS
—
EPSS
3%
Percentile
87.0
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in module.php in LANAI (la-nai) CMS 1.2.14 allow remote attackers to execute arbitrary SQL commands via (1) the mid parameter in an faqviewgroup action in the FAQ Modules, (2) the cid parameter in the EZSHOPINGCART Modules, or (3) the gid parameter in a view action in the GALLERY Modules.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02944 · 87.0th percentile
Published
2007-08-08T01:52Z
EPSS history
Timeline
  • 08 AUG 01:52Z
    Multiple SQL injection vulnerabilities in module.php in LANAI (la-nai) CMS 1.2.14 allow remote attackers to execute arbitrary SQL commands via (1) the mid…
    cvelistv5