CVE-2007-10001: web-cyradm search.php sql injection

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-01-05 · updated 2026-06-16
Weakness: CWE-89

Description

A vulnerability classified as problematic has been found in web-cyradm. This affects an unknown part of the file search.php. The manipulation of the argument searchstring leads to sql injection. It is recommended to apply a patch to fix this issue. The identifier VDB-217449 was assigned to this vulnerability.

Affected products

web-cyradm: all versions

References

https://github.com/web-cyradm/web-cyradm/commit/3e8f0717f133907bb6a09cb674b05c5f273da3e1
https://vuldb.com/?ctiid.217449
https://vuldb.com/?id.217449
https://github.com/web-cyradm/web-cyradm/commit/3e8f0717f133907bb6a09cb674b05c5f273da3e1
https://vuldb.com/?ctiid.217449
https://vuldb.com/?id.217449

Get alerted when CVE-2007-10001 or the next vulnerability affects your stack