CVE-2007-5458

MEDIO 6.8CVE-2007-5458 · Published 14/10/2007 · updated 16/06/2026

In breve

CVE-2007-5458 è una vulnerabilità MEDIO (CVSS 6.8) che riguarda newsletter module (alorys-hebergement).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.95%, superiore al 61.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
newsletter module alorys-hebergement	`= 1.00`	No fix yet

Description

SQL injection vulnerability in index.php in the newsletter module 1.0 for KwsPHP, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the newsletter parameter.

References

secunia.com/advisories/27219
securityfocus.com/bid/26051
exchange.xforce.ibmcloud.com/vulnerabilities/37083
exploit-db.com/exploits/4523

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free