CVE-2007-4956

CVE-2007-4956 affects KwsPHP 1.0 with multiple SQL injection weaknesses: login.php (pseudo parameter), index.php (carnet editer in Member_Space), and index.php (typenav in stats). Root cause is SQL injection in those parameters; CVSS says network attack, no auth, impact partial confidentiality/in...