Unscored CVE-2007-2626 EUVD-2007-2619GHSA-94m6-hwpc-3696

SQL injection vulnerability in admin.php in SchoolBoard allows remote attackers to execute arbitrary SQL commands via the (1) username and …

Published May 11, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in admin.php in SchoolBoard allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters. NOTE: CVE disputes this issue, because 'username' does not exist, and the password is not used in any queries

References

20070503 SchoolBoard (admin.php) Remote Login Bypass SQL Injection Vulnerability mailing-list
23798 vdb-entry
36162 vdb-entry
2695 third-party-advisory
20070511 probably false: SchoolBoard (admin.php) SQL injection mailing-list