Unscored CVE-2007-3588 EUVD-2007-3572GHSA-4fmh-v866-49mp

SQL injection vulnerability in reply.php in VBZooM 1.12 allows remote attackers to execute arbitrary SQL commands via the UserID parameter …

Published Jul 5, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in reply.php in VBZooM 1.12 allows remote attackers to execute arbitrary SQL commands via the UserID parameter to sub-join.php. NOTE: this may be the same as CVE-2006-3691.4.

References

vbzoom-reply-sql-injection(35171) vdb-entry
2861 third-party-advisory
20070629 SQL Injection In Script VBZooM V1.12 mailing-list