CVE-2007-0631

Eclectic Designs Cascadianfaq < 4.1 - SQL Injection

Title source: rule

Description

SQL injection vulnerability in index.php in Eclectic Designs CascadianFAQ 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by ajann · textwebappsphp

https://www.exploit-db.com/exploits/3227

View Code ZIP pw:eip

References (6)

[Exploit] http://www.securityfocus.com/bid/22314

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/3227

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/31968

[Third Party Advisory, VDB Entry] http://www.osvdb.org/31675

[Third Party Advisory] http://secunia.com/advisories/23965

[Third Party Advisory] http://www.vupen.com/english/advisories/2007/0424

Scores

EPSS 0.0426

EPSS Percentile 88.6%

Classification

Status draft

Affected Products (1)

eclectic_designs/cascadianfaq < 4.1

Timeline

Published Jan 31, 2007

Tracked Since Feb 18, 2026