← Vulnerability feed

Vulnerability record · CVE-2007-0133 · published 9 January 2007

CVE-2007-0133: Igeneric ig shop vulnerability

Igeneric · Ig Shop

Multiple SQL injection vulnerabilities in display_review.php in iGeneric iG Shop 1.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id or (2) user_login_cookie parameter.

7.5 CVSS 2.0 High EPSS 0.97% · top 39.5%
7.5CVSS 2.0 base score
0.97%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
16 Jun 2026Last modified by NVD

Description

Multiple SQL injection vulnerabilities in display_review.php in iGeneric iG Shop 1.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id or (2) user_login_cookie parameter.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://osvdb.org/33386
http://www.vupen.com/english/advisories/2007/0056
http://osvdb.org/33386
http://www.vupen.com/english/advisories/2007/0056

Track CVE-2007-0133 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2007-2717Igeneric ig shop vulnerabilitySQL injection vulnerability in shop/page.php in iGeneric (iG) Shop 1.4 allows remote attackers to execute arbitrary SQL commands via the type_id[] pa…EPSS 1.0%7.5CVE-2007-0132Igeneric ig shop vulnerabilitySQL injection vulnerability in compare_product.php in iGeneric iG Shop 1.4 allows remote attackers to execute arbitrary SQL commands via the id param…EPSS 1.8%7.5CVE-2007-0134Igeneric ig shop code injection vulnerabilityMultiple eval injection vulnerabilities in iGeneric iG Shop 1.0 allow remote attackers to execute arbitrary code via the action parameter, which is s…EPSS 11%

Source: NIST National Vulnerability Database (record CVE-2007-0133), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.