CVE-2007-1902

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-05-14 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in SonicBB 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) part and (2) by parameters to (a) search.php, or the (2) id parameter to (b) viewforum.php.

Affected products

Sonicbb: 1.0

References

http://marc.info/?l=full-disclosure&m=117914598917534&w=2
http://secunia.com/advisories/25279
http://www.netvigilance.com/advisory0019
http://www.osvdb.org/33907
http://www.securityfocus.com/archive/1/468536/100/0/threaded
http://www.securityfocus.com/bid/23964
http://www.vupen.com/english/advisories/2007/1816
https://exchange.xforce.ibmcloud.com/vulnerabilities/34258
http://marc.info/?l=full-disclosure&m=117914598917534&w=2
http://secunia.com/advisories/25279
http://www.netvigilance.com/advisory0019
http://www.osvdb.org/33907

Get alerted when CVE-2007-1902 or the next vulnerability affects your stack