CVE-2007-2942

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-05-31 · updated 2026-06-16

Description

SQL injection vulnerability in user.php in My Little Forum 1.7 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected products

My Little Homepage My Little Forum: through 1.7

References

http://osvdb.org/36273
http://secunia.com/advisories/25451
http://www.securityfocus.com/bid/24173
http://www.vupen.com/english/advisories/2007/1965
https://exchange.xforce.ibmcloud.com/vulnerabilities/34530
https://www.exploit-db.com/exploits/3989
http://osvdb.org/36273
http://secunia.com/advisories/25451
http://www.securityfocus.com/bid/24173
http://www.vupen.com/english/advisories/2007/1965
https://exchange.xforce.ibmcloud.com/vulnerabilities/34530
https://www.exploit-db.com/exploits/3989

Get alerted when CVE-2007-2942 or the next vulnerability affects your stack