CVE-2007-1909

Description

SQL injection vulnerability in login.php in Ryan Haudenschilt Battle.net Clan Script for PHP 1.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) user or (2) pass parameter.

References

https://www.exploit-db.com/exploits/3691

http://www.vupen.com/english/advisories/2007/1313

http://www.securityfocus.com/bid/23383

http://secunia.com/advisories/24838

http://osvdb.org/34747

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS