CVE-2007-1920

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-04-10 · updated 2026-06-16
Weakness: CWE-89

Description

SQL injection vulnerability in index.php in the aktualnosci module in SmodBIP 1.06 and earlier allows remote attackers to execute arbitrary SQL commands via the zoom parameter, possibly related to home.php.

Affected products

Smodbip: through 1.06

References

http://osvdb.org/34745
http://secunia.com/advisories/24802
http://www.securityfocus.com/bid/23356
http://www.vupen.com/english/advisories/2007/1298
https://exchange.xforce.ibmcloud.com/vulnerabilities/33476
https://www.exploit-db.com/exploits/3678
http://osvdb.org/34745
http://secunia.com/advisories/24802
http://www.securityfocus.com/bid/23356
http://www.vupen.com/english/advisories/2007/1298
https://exchange.xforce.ibmcloud.com/vulnerabilities/33476
https://www.exploit-db.com/exploits/3678

Get alerted when CVE-2007-1920 or the next vulnerability affects your stack