CVE-2007-2534

2007-05-0900:00:00

mitre

www.cve.org

AI Score

8.4

Confidence

Low

EPSS

0.004

Percentile

73.4%

JSON

Multiple SQL injection vulnerabilities in admin.php in phpHoo3 allow remote attackers to execute arbitrary SQL commands via the (1) ADMIN_USER (USER) and (2) ADMIN_PASS (PASS) parameters during a login. NOTE: CVE disputes this vulnerability, since ADMIN_USER/ADMIN_PASS are initialized before use