7.5
CVSSv2

CVE-2007-1806

Published: 02/04/2007 Updated: 11/10/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in categos.php in the RM+Soft Gallery (rmgallery) 1.0 module for Xoops allows remote malicious users to execute arbitrary SQL commands via the idcat parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

red mexico rm\\+soft gallery 1.0

Exploits

<html> <head> <title>XOOPS Module RM+Soft Gallery 10(categosphp) BLIND SQL Injection Exploit</title> <script type="text/javascript"> //'=============================================================================================== //'[Script Name: XOOPS Module RM+Soft Gallery 10 (categosphp) BLIND SQL Injection ...