← Vulnerability feed

Vulnerability record · CVE-2007-2717 · published 16 May 2007

CVE-2007-2717: Igeneric ig shop vulnerability

Igeneric · Ig Shop

SQL injection vulnerability in shop/page.php in iGeneric (iG) Shop 1.4 allows remote attackers to execute arbitrary SQL commands via the type_id[] parameter, a different vector than CVE-2005-0537.

7.5 CVSS 2.0 High EPSS 1.0% · top 38.3%
7.5CVSS 2.0 base score
1.0%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

SQL injection vulnerability in shop/page.php in iGeneric (iG) Shop 1.4 allows remote attackers to execute arbitrary SQL commands via the type_id[] parameter, a different vector than CVE-2005-0537.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://osvdb.org/37910
http://www.securityfocus.com/bid/23949 Exploit
https://www.exploit-db.com/exploits/3907
http://osvdb.org/37910
http://www.securityfocus.com/bid/23949 Exploit
https://www.exploit-db.com/exploits/3907

Track CVE-2007-2717 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2007-0132Igeneric ig shop vulnerabilitySQL injection vulnerability in compare_product.php in iGeneric iG Shop 1.4 allows remote attackers to execute arbitrary SQL commands via the id param…EPSS 1.8%7.5CVE-2007-0133Igeneric ig shop vulnerabilityMultiple SQL injection vulnerabilities in display_review.php in iGeneric iG Shop 1.4 and earlier allow remote attackers to execute arbitrary SQL comm…EPSS 0.97%7.5CVE-2007-0134Igeneric ig shop code injection vulnerabilityMultiple eval injection vulnerabilities in iGeneric iG Shop 1.0 allow remote attackers to execute arbitrary code via the action parameter, which is s…EPSS 11%

Source: NIST National Vulnerability Database (record CVE-2007-2717), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.