Unscored CVE-2007-5991 EUVD-2007-5961GHSA-ghww-7m6r-mpp8

SQL injection vulnerability in index.php in ExoPHPdesk allows remote attackers to execute arbitrary SQL commands via the user parameter in …

Published Nov 15, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in index.php in ExoPHPdesk allows remote attackers to execute arbitrary SQL commands via the user parameter in a profile fn action.

References

20071113 ExoPHPdesk user profile XSS / profile SQL injection mailing-list
3368 third-party-advisory
26431 vdb-entry
exophpdesk-index-sql-injection(38448) vdb-entry