CVE-2007-1902: Sonicbb

Medium severity, CVSS 6.8. EPSS: 1.6% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in SonicBB 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) part and (2) by parameters to (a) search.php, or the (2) id parameter to (b) viewforum.php.

Affected products

• Sonicbb Sonicbb: version 1.0 only

Published 2007-05-14. Last modified 2026-06-16.