CVE-2007-6580
Multiple SQL injection vulnerabilities in Wallpaper Site 1.0.09 allow remote attackers to execute arbitrary SQL commands via (1) the catid parameter to category.php or (2) the groupid parameter to editadgroup.php.
- Score
- CVSS 2.0 7.5 High
- Status
- Modified - cve@mitre.org
- Published
- 2007-12-28
- Last modified
- 2024-08-07
- Weaknesses
- CWE-89
Affected products
References
- http://osvdb.org/40368
- http://osvdb.org/40369
- http://www.securityfocus.com/bid/26984
- https://www.exploit-db.com/exploits/4770
