CVE-2007-6058
Multiple SQL injection vulnerabilities in index.php in ProfileCMS 1.0 and earlier allow remote...
CVE-2007-6058 is a high vulnerability (CVSS 7.5) in Profilecms, published November 20, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.23%, the 68th percentile. No source names a fixed version.
Multiple SQL injection vulnerabilities in index.php in ProfileCMS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) codes action in the profile-codes module, (2) videos action in the video-codes module, or (3) games action in the arcade-games module.
Exploit likelihood
What each source reports
NVD Score used
Multiple SQL injection vulnerabilities in index.php in ProfileCMS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) codes action in the profile-codes module, (2) videos action in the video-codes module, or (3) games action in the arcade-games module.
- Record
CVE-2007-6058- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-89
- Updated
- 2026-11-02
CVE List No score
Multiple SQL injection vulnerabilities in index.php in ProfileCMS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) codes action in the profile-codes module, (2) videos action in the video-codes module, or (3) games action in the arcade-games module.
- Record
CVE-2007-6058- Updated
- 2026-11-02
EUVDEUVD-2007-6028 No score
Multiple SQL injection vulnerabilities in index.php in ProfileCMS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) codes action in the profile-codes module, (2) videos action in the video-codes module, or (3) games action in the arcade-games module.
- Record
EUVD-2007-6028- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c3j6-m7f6-92cp No score
Multiple SQL injection vulnerabilities in index.php in ProfileCMS 1.0 and earlier allow remote...
Multiple SQL injection vulnerabilities in index.php in ProfileCMS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) codes action in the profile-codes module, (2) videos action in the video-codes module, or (3) games action in the arcade-games module.
- Record
GHSA-c3j6-m7f6-92cp- Weakness
- CWE-89
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | ProfileCMS 1.0 - 'id' SQL Injection | 2007-11-16 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories |
| 2026-11-02 | created | CVE List, NVD |
References
exploit-db.com/exploits/4627
advisories.echo.or.id/adv/adv84-K-159-2007.txt
vupen.com/english/advisories/2007/3908
secunia.com/advisories/27730
securityfocus.com/bid/26490
exchange.xforce.ibmcloud.com/vulnerabilities/38538
nvd.nist.gov/vuln/detail/CVE-2007-6058
github.com/advisories/GHSA-c3j6-m7f6-92cp