Unscored CVE-2007-3557 EUVD-2007-3541GHSA-w2v9-62px-pr3m

SQL injection vulnerability in admin/login.php in Wheatblog (wB) 1.1, when magic_quotes_gpc is disabled, allows remote attackers to execute…

Published Jul 4, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in admin/login.php in Wheatblog (wB) 1.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the login parameter.

References

ADV-2007-2405 vdb-entry
2856 third-party-advisory
20070630 WheatBlog 1.1 RFI/SQL Injection mailing-list
25903 third-party-advisory
24715 vdb-entry
wheatblog-login-sql-injection(35211) vdb-entry
37063 vdb-entry