CVE-2007-1135 Multiple SQL injection vulnerabilities in WebMplayer before 0.6.1-Alpha allow remote attackers to execute arbitrary SQL commands via the (1) strid parameter to index.php and the (2) id[0] or other id....
MediumCVSS 6.8
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in WebMplayer before 0.6.1-Alpha allow remote attackers to execute arbitrary SQL commands via the (1) strid parameter to index.php and the (2) id[0] or other id array index parameter to filecheck.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sourceforge webmplayer | <= 0.6.1-alpha | No fix listed |
References
- 34442 vdb-entry
- 34443 vdb-entry
- sourceforge.net patch
- 22726 vdb-entry
- ADV-2007-0742 vdb-entry