CVE-2007-4210

Multiple SQL injection vulnerabilities in module.php in LANAI (la-nai) CMS 1.2.14 allow remote attackers to execute arbitrary SQL commands via (1) the mid parameter in an faqviewgroup action in the FAQ Modules, (2) the cid parameter in the EZSHOPINGCART Modules, or (3) the gid parameter in a view action in the GALLERY Modules.

Link	Resource
http://www.securityfocus.com/archive/1/475447
http://www.securityfocus.com/bid/25193	Patch
http://secunia.com/advisories/26339
http://securityreason.com/securityalert/2975
http://osvdb.org/37470
http://osvdb.org/36438
http://osvdb.org/37471
https://exchange.xforce.ibmcloud.com/vulnerabilities/35786

Configuration 1

cpe:2.3:a:redline_software:lanai_cms:1.2.14:*:*:*:*:*:*:*

---

Published : 2007-08-08 02:17

Updated : 2017-07-29 01:32

---

NVD link : CVE-2007-4210

Mitre link : CVE-2007-4210

No products.

NVD-CWE-Other