← Database

CVE-2007-5991

HIGH CVSS: 7.5 Published: 2007-11-15 Modified: 2026-06-16

Description

SQL injection vulnerability in index.php in ExoPHPdesk allows remote attackers to execute arbitrary SQL commands via the user parameter in a profile fn action.

Affected Platforms

Exo Exophpdesk

Weakness Type

CWE-89

References