CVE-2007-6538: Mrbs

High severity, CVSS 7.5. EPSS: 3.8% chance of exploitation in the next 30 days.

SQL injection vulnerability in ing/blocks/mrbs/code/web/view_entry.php in the MRBS plugin for Moodle allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected products

• Mrbs Mrbs: version 1.2.3 only; version 1.2.5 only

Published 2007-12-27. Last modified 2026-06-16.