CVE-2007-4210

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-08-08 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in module.php in LANAI (la-nai) CMS 1.2.14 allow remote attackers to execute arbitrary SQL commands via (1) the mid parameter in an faqviewgroup action in the FAQ Modules, (2) the cid parameter in the EZSHOPINGCART Modules, or (3) the gid parameter in a view action in the GALLERY Modules.

Affected products

Redline Software Lanai Cms: 1.2.14

References

http://osvdb.org/36438
http://osvdb.org/37470
http://osvdb.org/37471
http://secunia.com/advisories/26339
http://securityreason.com/securityalert/2975
http://www.securityfocus.com/archive/1/475447
http://www.securityfocus.com/bid/25193
https://exchange.xforce.ibmcloud.com/vulnerabilities/35786
http://osvdb.org/36438
http://osvdb.org/37470
http://osvdb.org/37471
http://secunia.com/advisories/26339

Get alerted when CVE-2007-4210 or the next vulnerability affects your stack