CVE-2007-1811: SQL injection vulnerability in index.php in the Tiny Event (tinyevent) 1.01 and earlier module for Xoops al...

Security readout for executives and security teams

CVE-2007-1811 is a remote SQL injection in the Tiny Event (tinyevent) module for XOOPS, version 1.01 and earlier. An unauthenticated attacker may be able to manipulate the module's event display request to run unintended database queries. Business risk depends on whether legacy XOOPS sites still expose this module. Likely exposure is limited to XOOPS deployments using Tiny Event/tinyevent 1.01 or earlier with the affected index.php route publicly reachable. The source bundle lists no CPEs or normalized vendor/product identifiers, so validation requires direct CMS and module inventory. Prioritize investigation if the organization still runs legacy XOOPS sites or inherited PHP applications. The issue is old, but remote SQL injection against a CMS module can expose or modify database content. If no XOOPS/tinyevent assets exist, urgency is low after inventory confirmation. Mitigation focus: Inventory XOOPS sites for the Tiny Event/tinyevent module and deployed version.; Disable or remove Tiny Event where it is unused or cannot be validated.; Check vendor or project guidance for a fixed release or official workaround..

Prepared

Jun 29, 2026, 06:24 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.