CVE-2007-1548

CVE-2007-1548 : SQL injection in Web Wiz Forums (functions/functions_filters.asp) prior to version 8.05a (MySQL) due to improper filtering of certain characters in SQL commands. This allows remote attackers to execute arbitrary SQL via crafted input (e.g., the name parameter to forum/pop_up_membe...