CVE-2007-5688

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-10-29 · updated 2026-06-16
Weakness: CWE-89

Description

Multiple SQL injection vulnerabilities in directory.php in the Multi-Forums (aka Multi Host Forum Pro) module 1.3.3, for phpBB and Invision Power Board (IPB or IP.Board), allow remote attackers to execute arbitrary SQL commands via the (1) go and (2) cat parameters.

Affected products

Invision Power Services Invision Power Board: all versions
phpBB: all versions
Sebflipper Multi-Forums Module: 1.3.3

References

http://secunia.com/advisories/27406
http://www.inj3ct-it.org/exploit/Multi_Host.txt
http://www.securityfocus.com/archive/1/482838/100/0/threaded
http://www.securityfocus.com/bid/26213
https://exchange.xforce.ibmcloud.com/vulnerabilities/37461
http://secunia.com/advisories/27406
http://www.inj3ct-it.org/exploit/Multi_Host.txt
http://www.securityfocus.com/archive/1/482838/100/0/threaded
http://www.securityfocus.com/bid/26213
https://exchange.xforce.ibmcloud.com/vulnerabilities/37461

Get alerted when CVE-2007-5688 or the next vulnerability affects your stack