CVE-2007-5016

Insane Visions Onecms - SQL Injection

Title source: rule

Description

SQL injection vulnerability in userreviews.php in OneCMS 2.4 allows remote attackers to execute arbitrary SQL commands via the abc parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by str0ke · perlwebappsphp
https://www.exploit-db.com/exploits/4433

References (5)

Scores

EPSS 0.0049
EPSS Percentile 65.4%

Details

CWE
CWE-89
Status published
Products (1)
insane_visions/onecms 2.4
Published Sep 20, 2007
Tracked Since Feb 18, 2026