CVEvulnerability
CVE-2007-1909
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-04-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
SQL injection vulnerability in login.php in Ryan Haudenschilt Battle.net Clan Script for PHP 1.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) user or (2) pass parameter.
Affected configurations
• ryan haudenschilt battle.net clan script
References
- http://osvdb.org/34747 osvdb.org
- http://secunia.com/advisories/24838 secunia.com
- http://www.securityfocus.com/bid/23383 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/1313 www.vupen.com
- https://www.exploit-db.com/exploits/3691 www.exploit-db.com
- http://osvdb.org/34747 osvdb.org
- http://secunia.com/advisories/24838 secunia.com
- http://www.securityfocus.com/bid/23383 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/1313 www.vupen.com
- https://www.exploit-db.com/exploits/3691 www.exploit-db.com