Vulnerabilities > Xoops > Rha7 Downloads Module > 1.0

DATE	CVE	VULNERABILITY TITLE	RISK
2007-04-11	CVE-2007-1960	SQL Injection vulnerability in Xoops Rha7 Downloads Module 1.0/1.10 SQL injection vulnerability in visit.php in the Rha7 Downloads (rha7downloads) 1.0 module for XOOPS, and possibly other versions up to 1.10, allows remote attackers to execute arbitrary SQL commands via the lid parameter. network low complexity xoops CWE-89	7.5

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.