[email protected]CVE-2007-1548

HistoryMar 20, 2007 - 10:19 p.m.

CVE-2007-1548

2007-03-2022:19:00

CWE-89

[email protected]

web.nvd.nist.gov

sql injection

web wiz forums

vulnerability

nvd

8.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

72.5%

JSON

SQL injection vulnerability in functions/functions_filters.asp in Web Wiz Forums before 8.05a (MySQL version) does not properly filter certain characters in SQL commands, which allows remote attackers to execute arbitrary SQL commands via "’ (backslash double-quote quote) sequences, which are collapsed into '', as demonstrated via the name parameter to forum/pop_up_member_search.asp.

CPENameOperatorVersion
webwizguide:web_wiz_forumswebwizguide web wiz forumseq7.95
webwizguide:web_wiz_forumswebwizguide web wiz forumseq6
webwizguide:web_wiz_forumswebwizguide web wiz forumseq7.92
webwizguide:web_wiz_forumswebwizguide web wiz forumseq6.34
webwizguide:web_wiz_forumswebwizguide web wiz forumseq6.21
webwizguide:web_wiz_forumswebwizguide web wiz forumseq6.32
webwizguide:web_wiz_forumswebwizguide web wiz forumseq6.27
webwizguide:web_wiz_forumswebwizguide web wiz forumseq8.03
webwizguide:web_wiz_forumswebwizguide web wiz forumseq8.04
webwizguide:web_wiz_forumswebwizguide web wiz forumseq7

CPE	Name	Operator	Version
webwizguide:web_wiz_forums	webwizguide web wiz forums	eq	7.95
webwizguide:web_wiz_forums	webwizguide web wiz forums	eq	6
webwizguide:web_wiz_forums	webwizguide web wiz forums	eq	7.92
webwizguide:web_wiz_forums	webwizguide web wiz forums	eq	6.34
webwizguide:web_wiz_forums	webwizguide web wiz forums	eq	6.21
webwizguide:web_wiz_forums	webwizguide web wiz forums	eq	6.32
webwizguide:web_wiz_forums	webwizguide web wiz forums	eq	6.27
webwizguide:web_wiz_forums	webwizguide web wiz forums	eq	8.03
webwizguide:web_wiz_forums	webwizguide web wiz forums	eq	8.04
webwizguide:web_wiz_forums	webwizguide web wiz forums	eq	7

Rows per page:

1-10 of 421

References

ifsec.blogspot.com/2007/03/web-wiz-forums-805-mysql-version-sql.html

osvdb.org/34344

secunia.com/advisories/24561

securityreason.com/securityalert/2456

www.securityfocus.com/archive/1/463287/100/0/threaded

www.securityfocus.com/bid/23051

www.vupen.com/english/advisories/2007/1061

www.webwizguide.info/web_wiz_forums/Version%20History.txt

exchange.xforce.ibmcloud.com/vulnerabilities/33095

8.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

72.5%

JSON

Related for CVE-2007-1548

cvelist1 prion1 securityvulns1