SQL injection vulnerability in philboard_forum.asp in husrevforum 1.0.1 allows remote attackers to execute arbitrary SQL commands via the…

Description

SQL injection vulnerability in philboard_forum.asp in husrevforum 1.0.1 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: it was later reported that 2.0.1 is also affected.

Scores

EPSS (exploitation in 30 days)

1.9% · top 21% of all CVEs (3 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Weakness

• n/a
• CWE-89 (opens in a new tab)All about CWE-89 and its CVEs

Affected products

• n/a

  • affected n/a

References (9)

• ADV-2007-2557 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• 26089 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 24928 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• 26736 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://yollubunlar.org/husrev-forums-v201powerboard-sql-injection-exploit-3503.html (opens in a new tab)x_refsource_MISCx_transferred
• husrevforum-philboardforum-sql-injection(35443) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
• husrev-philboardforum-sql-injection(36530) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
• 38185 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 20070909 Husrev Forums v2.0.1:PoWerBoard Sql (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2007-3884](https://trackcve.app/badge/CVE-2007-3884.svg)](https://trackcve.app/cve/CVE-2007-3884)

Record last updated 7 Aug 2024, 14:37 UTC.