CVE-2007-0695: Free Lan Intra Internet Portal

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Free LAN In(tra|ter)net Portal (FLIP) before 1.0-RC3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: some sources mention the escape_sqlData, implode_sql, and implode_sqlIn functions, but these are protection schemes, not the vulnerable functions.

Affected products

• Free Lan Intra Internet Portal Free Lan Intra Internet Portal: up to and including 1.0_rc2; version 0.9.0.730 only; version 0.9.0.1029 only; version 1.0_rc1 only

Published 2007-02-03. Last modified 2026-06-16.