CVE-2007-2373: Wf-Links

High severity, CVSS 7.5. EPSS: 3.7% chance of exploitation in the next 30 days.

SQL injection vulnerability in viewcat.php in the WF-Links (wflinks) 1.03 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter.

Affected products

• Wf-Links Wf-Links: up to and including 1.03

Published 2007-04-30. Last modified 2026-06-16.