Unscored CVE-2007-1154 EUVD-2007-1151GHSA-9rc5-cwv6-75xr

SQL injection vulnerability in webSPELL allows remote attackers to execute arbitrary SQL commands via a ws_auth cookie, a different vulnera…

Published Feb 27, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in webSPELL allows remote attackers to execute arbitrary SQL commands via a ws_auth cookie, a different vulnerability than CVE-2006-4782.

References

webspell-login-sql-injection(32669) vdb-entry
2337 third-party-advisory
20070222 WebSpell > 4.0 Authentication Bypass and arbitrary code execution mailing-list