CVE-2007-1902
UnknownEPSS 1.63%
Last modified
CVE-2007-1902 is a vulnerability of currently unknown severity. Multiple SQL injection vulnerabilities in SonicBB 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) part and (2) by parameters to (a) search.php, or the (2) id parameter to (b) viewforum.php.. EPSS estimates a 1.63% chance of exploitation in the next 30 days.
Description
Multiple SQL injection vulnerabilities in SonicBB 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) part and (2) by parameters to (a) search.php, or the (2) id parameter to (b) viewforum.php.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Sonicbb | Sonicbb | 1.0 |
References
- http://www.netvigilance.com/advisory0019Exploit, Vendor Advisory
- http://www.netvigilance.com/advisory0019Exploit, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-1902?
Multiple SQL injection vulnerabilities in SonicBB 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) part and (2) by parameters to (a) search.php, or the (2) id parameter to (b) viewforum.php.
How severe is CVE-2007-1902?
Severity scoring for CVE-2007-1902 is pending analysis. The EPSS model estimates a 1.63% probability of exploitation in the next 30 days.
How do I fix CVE-2007-1902?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-1896Directory traversal vulnerability in chat.php in Sky GUNNING…
- CVE-2007-1897SQL injection vulnerability in xmlrpc (xmlrpc.php) in WordPr…
- CVE-2007-1898formmail.php in Jetbox CMS 2.1 allows remote attackers to se…
- CVE-2007-1899Multiple SQL injection vulnerabilities in myWebland myBloggi…
- CVE-2007-1900CRLF injection vulnerability in the FILTER_VALIDATE_EMAIL fi…
- CVE-2007-1901SonicBB 1.0 allows remote attackers to obtain sensitive info…
- CVE-2007-1903Cross-site scripting (XSS) vulnerability in search.php in So…
- CVE-2007-1904Directory traversal vulnerability in AOL Instant Messenger (…
- CVE-2007-1905Cross-site scripting (XSS) vulnerability in auth.php in Pine…
- CVE-2007-1906Directory traversal vulnerability in richedit/keyboard.php i…
- CVE-2007-1907PHP remote file inclusion vulnerability in warn.php in Patho…
- CVE-2007-1908PHP file inclusion vulnerability in php121db.php in PHP121 I…
Are you affected by CVE-2007-1902?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST