Vulnerability Details CVE-2007-1548
SQL injection vulnerability in functions/functions_filters.asp in Web Wiz Forums before 8.05a (MySQL version) does not properly filter certain characters in SQL commands, which allows remote attackers to execute arbitrary SQL commands via \"' (backslash double-quote quote) sequences, which are collapsed into \'', as demonstrated via the name parameter to forum/pop_up_member_search.asp.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 74.2%
CVSS Severity
CVSS v2 Score 7.5
References
- http://ifsec.blogspot.com/2007/03/web-wiz-forums-805-mysql-version-sql.html
- http://osvdb.org/34344
- http://secunia.com/advisories/24561
- http://securityreason.com/securityalert/2456
- http://www.securityfocus.com/archive/1/463287/100/0/threaded
- http://www.securityfocus.com/bid/23051
- http://www.vupen.com/english/advisories/2007/1061
- http://www.webwizguide.info/web_wiz_forums/Version%20History.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33095
- http://ifsec.blogspot.com/2007/03/web-wiz-forums-805-mysql-version-sql.html
- http://osvdb.org/34344
- http://secunia.com/advisories/24561
- http://securityreason.com/securityalert/2456
- http://www.securityfocus.com/archive/1/463287/100/0/threaded
- http://www.securityfocus.com/bid/23051
- http://www.vupen.com/english/advisories/2007/1061
- http://www.webwizguide.info/web_wiz_forums/Version%20History.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33095
Products affected by CVE-2007-1548
-
cpe:2.3:a:webwizguide:web_wiz_forums:*
-
cpe:2.3:a:webwizguide:web_wiz_forums:5.21
-
cpe:2.3:a:webwizguide:web_wiz_forums:5.22
-
cpe:2.3:a:webwizguide:web_wiz_forums:6
-
cpe:2.3:a:webwizguide:web_wiz_forums:6.0
-
cpe:2.3:a:webwizguide:web_wiz_forums:6.10
-
cpe:2.3:a:webwizguide:web_wiz_forums:6.11
-
cpe:2.3:a:webwizguide:web_wiz_forums:6.12
-
cpe:2.3:a:webwizguide:web_wiz_forums:6.20
-
cpe:2.3:a:webwizguide:web_wiz_forums:6.21
-
cpe:2.3:a:webwizguide:web_wiz_forums:6.22
-
cpe:2.3:a:webwizguide:web_wiz_forums:6.23
-
cpe:2.3:a:webwizguide:web_wiz_forums:6.24
-
cpe:2.3:a:webwizguide:web_wiz_forums:6.25
-
cpe:2.3:a:webwizguide:web_wiz_forums:6.26
-
cpe:2.3:a:webwizguide:web_wiz_forums:6.27
-
cpe:2.3:a:webwizguide:web_wiz_forums:6.28
-
cpe:2.3:a:webwizguide:web_wiz_forums:6.29
-
cpe:2.3:a:webwizguide:web_wiz_forums:6.30
-
cpe:2.3:a:webwizguide:web_wiz_forums:6.32
-
cpe:2.3:a:webwizguide:web_wiz_forums:6.33
-
cpe:2.3:a:webwizguide:web_wiz_forums:6.34
-
cpe:2.3:a:webwizguide:web_wiz_forums:7
-
cpe:2.3:a:webwizguide:web_wiz_forums:7.0
-
cpe:2.3:a:webwizguide:web_wiz_forums:7.01
-
cpe:2.3:a:webwizguide:web_wiz_forums:7.5
-
cpe:2.3:a:webwizguide:web_wiz_forums:7.51
-
cpe:2.3:a:webwizguide:web_wiz_forums:7.51a
-
cpe:2.3:a:webwizguide:web_wiz_forums:7.6
-
cpe:2.3:a:webwizguide:web_wiz_forums:7.7
-
cpe:2.3:a:webwizguide:web_wiz_forums:7.7a
-
cpe:2.3:a:webwizguide:web_wiz_forums:7.8
-
cpe:2.3:a:webwizguide:web_wiz_forums:7.9
-
cpe:2.3:a:webwizguide:web_wiz_forums:7.92
-
cpe:2.3:a:webwizguide:web_wiz_forums:7.95
-
cpe:2.3:a:webwizguide:web_wiz_forums:7.96
-
cpe:2.3:a:webwizguide:web_wiz_forums:8
-
cpe:2.3:a:webwizguide:web_wiz_forums:8.0
-
cpe:2.3:a:webwizguide:web_wiz_forums:8.01
-
cpe:2.3:a:webwizguide:web_wiz_forums:8.02
-
cpe:2.3:a:webwizguide:web_wiz_forums:8.03
-
cpe:2.3:a:webwizguide:web_wiz_forums:8.04