CVE-2007-3557

2007-07-0416:00:00

mitre

www.cve.org

8.3 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

82.2%

JSON

SQL injection vulnerability in admin/login.php in Wheatblog (wB) 1.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the login parameter.

References

osvdb.org/37063

secunia.com/advisories/25903

securityreason.com/securityalert/2856

www.securityfocus.com/archive/1/472575/100/0/threaded

www.securityfocus.com/bid/24715

www.vupen.com/english/advisories/2007/2405

exchange.xforce.ibmcloud.com/vulnerabilities/35211