$ cve CVE-2007-1550 JSON

CVE-2007-1550 EXPLOIT

7.5

HIGH · CVSS 2.0 · EPSS 2% (pctl 81)

Patch early

A public exploit exists.

Description

Multiple SQL injection vulnerabilities in phpx 3.5.15 allow remote attackers to execute arbitrary SQL commands via the (1) image_id or (2) cat_id parameter to (a) gallery.php; the (3) news_id parameter to (b) news.php or (c) print.php; (4) the news_cat_id parameter to news.php; the (5) cat_id, (6) topic_id, or (7) post_id parameter to (d) forums.php; or (8) the user_id parameter to (e) users.php.

Scoring

CVSS	7.5 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS	2.05% — more likely to be exploited than 81% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2007-03-20
Last modified	2026-06-16

Affected (1)

Vendor	Product
phpx	phpx

Public exploits

Source	Title	Date
exploit-db	PHPX 3.5.15/3.5.16 - 'print.php' SQL Injection	2007-03-19
exploit-db	PHPX 3.5.15/3.5.16 - 'forums.php' SQL Injection	2007-03-19
exploit-db	PHPX 3.5.15/3.5.16 - 'users.php' SQL Injection	2007-03-19
exploit-db	PHPX 3.5.15/3.5.16 - 'news.php' SQL Injection	2007-03-19
exploit-db	PHPX 3.5.15/3.5.16 - 'gallery.php' SQL Injection	2007-03-19

References

→ the Explorer · watch your stack · NVD