CVE-2007-1548 - CVE House
Back to Database
Status published High CVE-2007-1548

SQL injection vulnerability in functions/functions_filters.asp in Web Wiz Forums before...

Vulnerability Description

SQL injection vulnerability in functions/functions_filters.asp in Web Wiz Forums before 8.05a (MySQL version) does not properly filter certain characters in SQL commands, which allows remote attackers to execute arbitrary SQL commands via \"' (backslash double-quote quote) sequences, which are collapsed into \'', as demonstrated via the name parameter to forum/pop_up_member_search.asp.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-1548

Credits & Attribution

No credits recorded in the NVD database.

References

More from webwizguide

View All →
CVE-2008-3392
Cross-site request forgery (CSRF) vulnerability in Web Wiz Forum 9.5...
Medium 5.8
CVE-2008-3391
Multiple cross-site scripting (XSS) vulnerabilities in Web Wiz Forum 9.5...
Medium 4.3
CVE-2008-3367
Cross-site scripting (XSS) vulnerability in RTE_popup_link.asp in Web Wiz Rich...
Medium 4.3
CVE-2003-1571
Web Wiz Guestbook 6.0 stores sensitive information under the web...
Medium 5

Affected Vendor

webwizguide

View all reports →

Affected Software

web wiz forums
Vulnerable Versions:
0, 5.21, 5.22, 6, 6.0, 6.10, 6.11, 6.12, 6.20, 6.21, 6.22, 6.23, 6.24, 6.25, 6.26, 6.27, 6.28, 6.29, 6.30, 6.32, 6.33, 6.34, 7, 7.0, 7.01, 7.5, 7.6, 7.7, 7.7a, 7.8, 7.9, 7.51, 7.51a, 7.92, 7.95, 7.96, 8, 8.0, 8.01, 8.02, 8.03, 8.04

Timeline

Official Publish: March 20th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.