Unscored CVE-2007-3966 EUVD-2007-3950GHSA-r24g-2v7x-vg9j

SQL injection vulnerability in Munch Pro allows remote attackers to execute arbitrary SQL commands via the login field to /admin, a differe…

Published Jul 25, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in Munch Pro allows remote attackers to execute arbitrary SQL commands via the login field to /admin, a different vulnerability than CVE-2006-5880.

References

20070721 [Aria-Security] Munch Pro Remote Login ByPass mailing-list
24993 vdb-entry
2921 third-party-advisory
39001 vdb-entry