← Vulnerability feed

Vulnerability record · CVE-2007-0132 · published 9 January 2007

CVE-2007-0132: Igeneric ig shop vulnerability

Igeneric · Ig Shop

SQL injection vulnerability in compare_product.php in iGeneric iG Shop 1.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.

7.5 CVSS 2.0 High EPSS 1.8% · top 22.2%
7.5CVSS 2.0 base score
1.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
16References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

SQL injection vulnerability in compare_product.php in iGeneric iG Shop 1.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://osvdb.org/33385
http://packetstormsecurity.nl/0701-exploits/igshop10-multiple.txt Exploit
http://secunia.com/advisories/23604 Vendor Advisory
http://www.securityfocus.com/archive/1/456043/100/0/threaded
http://www.securityfocus.com/bid/21874
http://www.vupen.com/english/advisories/2007/0056
https://exchange.xforce.ibmcloud.com/vulnerabilities/31299
https://www.exploit-db.com/exploits/3083
http://osvdb.org/33385
http://packetstormsecurity.nl/0701-exploits/igshop10-multiple.txt Exploit
http://secunia.com/advisories/23604 Vendor Advisory
http://www.securityfocus.com/archive/1/456043/100/0/threaded
http://www.securityfocus.com/bid/21874
http://www.vupen.com/english/advisories/2007/0056
https://exchange.xforce.ibmcloud.com/vulnerabilities/31299
https://www.exploit-db.com/exploits/3083

Track CVE-2007-0132 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2007-2717Igeneric ig shop vulnerabilitySQL injection vulnerability in shop/page.php in iGeneric (iG) Shop 1.4 allows remote attackers to execute arbitrary SQL commands via the type_id[] pa…EPSS 1.0%7.5CVE-2007-0133Igeneric ig shop vulnerabilityMultiple SQL injection vulnerabilities in display_review.php in iGeneric iG Shop 1.4 and earlier allow remote attackers to execute arbitrary SQL comm…EPSS 0.97%7.5CVE-2007-0134Igeneric ig shop code injection vulnerabilityMultiple eval injection vulnerabilities in iGeneric iG Shop 1.0 allow remote attackers to execute arbitrary code via the action parameter, which is s…EPSS 11%

Source: NIST National Vulnerability Database (record CVE-2007-0132), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.