CVE-2007-1814: Xoops Core Module

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in viewcat.php in the Core module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2007-0377.

Affected products

• Xoops Core Module: any version

Published 2007-04-02. Last modified 2026-06-16.