CVE-2007-1920

SQL injection vulnerability in index.php in the aktualnosci module in SmodBIP 1.06 and earlier allows remote attackers to execute arbitrary SQL commands via the zoom parameter, possibly related to home.php.

• CWE-89

• http://osvdb.org/34745
• http://secunia.com/advisories/24802Vendor Advisory
• http://www.securityfocus.com/bid/23356Exploit, Vendor Advisory
• http://www.vupen.com/english/advisories/2007/1298Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33476
• https://www.exploit-db.com/exploits/3678
• http://osvdb.org/34745
• http://secunia.com/advisories/24802Vendor Advisory
• http://www.securityfocus.com/bid/23356Exploit, Vendor Advisory
• http://www.vupen.com/english/advisories/2007/1298Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33476
• https://www.exploit-db.com/exploits/3678

Published

Apr 10, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-1914The RFC_START_PROGRAM function in the SAP RFC Library 6.40 a…
• CVE-2007-1915Buffer overflow in the RFC_START_PROGRAM function in the SAP…
• CVE-2007-1916Buffer overflow in the RFC_START_GUI function in the SAP RFC…
• CVE-2007-1917Buffer overflow in the SYSTEM_CREATE_INSTANCE function in th…
• CVE-2007-1918The RFC_SET_REG_SERVER_PROPERTY function in the SAP RFC Libr…
• CVE-2007-1919Cross-site scripting (XSS) vulnerability in index.php in Ari…
• CVE-2007-1921LIBSNDFILE.DLL, as used by AOL Nullsoft Winamp 5.33 and poss…
• CVE-2007-1922The Impulse Tracker (IT) and ScreamTracker 3 (S3M) modules i…
• CVE-2007-1923(1) LedgerSMB and (2) DWS Systems SQL-Ledger implement acces…
• CVE-2007-1924Multiple PHP remote file inclusion vulnerabilities in phpCon…
• CVE-2007-1925The borrado function in modules/Your_Account/index.php in Tr…
• CVE-2007-1926Cross-site scripting (XSS) vulnerability in JBMC Software Di…