CVE-2007-5068

Phpfullannu - SQL Injection

Title source: rule
STIX 2.1

Description

SQL injection vulnerability in index.php in phpFullAnnu (PFA) 6.0 allows remote attackers to execute arbitrary SQL commands via the mod parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by IHTeam · textwebappsphp
https://www.exploit-db.com/exploits/4449

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/25779
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/36747
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/4449
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3254
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/38164

Scores

EPSS 0.0047
EPSS Percentile 64.7%

Details

CWE
CWE-89
Status published
Products (1)
phpfullannu/phpfullannu 6.0
Published Sep 24, 2007
Tracked Since Feb 18, 2026