CVE-2008-4906: w1n78 Lyrics

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in lyrics_song.php in the Lyrics (lyrics_menu) plugin 0.42 for e107 allows remote attackers to execute arbitrary SQL commands via the l_id parameter. NOTE: some of these details are obtained from third party information.

Affected products

• w1n78 Lyrics: version 0.4.2 only

Published 2008-11-04. Last modified 2026-06-16.