Unrated severityNVD Advisory· Published Aug 8, 2007· Updated Jun 16, 2026

CVE-2007-4210

Description

Multiple SQL injection vulnerabilities in module.php in LANAI (la-nai) CMS 1.2.14 allow remote attackers to execute arbitrary SQL commands via (1) the mid parameter in an faqviewgroup action in the FAQ Modules, (2) the cid parameter in the EZSHOPINGCART Modules, or (3) the gid parameter in a view action in the GALLERY Modules.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Redlinesoft/Lanai CMS
cpe:2.3:a:redline_software:lanai_cms:1.2.14:*:*:*:*:*:*:*
LANAI/LANAI CMSllm-create
Range: =1.2.14

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/25193nvdPatch
osvdb.org/36438nvd
osvdb.org/37470nvd
osvdb.org/37471nvd
secunia.com/advisories/26339nvd
securityreason.com/securityalert/2975nvd
www.securityfocus.com/archive/1/475447nvd
exchange.xforce.ibmcloud.com/vulnerabilities/35786nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000