CVE-2007-3687

MEDIO 6.5CVE-2007-3687 · Published 11/07/2007 · updated 16/06/2026

En resumen

CVE-2007-3687 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a rpg inferno (infernotechnologies).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.0%, mayor que el 64.1% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
rpg inferno infernotechnologies	`≤ 2.4`	No fix yet

Description

SQL injection vulnerability in inferno.php in the Inferno Technologies RPG Inferno 2.4 and earlier, a vBulletin module, allows remote authenticated attackers to execute arbitrary SQL commands via the id parameter in a ScanMember do action.

References

infernotechnologies.net
osvdb.org/35965 · Exploit
secunia.com/advisories/25986 · Vendor Advisory
securityfocus.com/bid/24839 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/35319
exploit-db.com/exploits/4166

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free