CVE-2007-1779 Multiple SQL injection vulnerabilities in the MySQL back-end in Advanced Website Creator (AWC) before 1.9.0 might allow remote attackers to execute arbitrary SQL commands via unspecified parameters, r...
HighCVSS 7.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in the MySQL back-end in Advanced Website Creator (AWC) before 1.9.0 might allow remote attackers to execute arbitrary SQL commands via unspecified parameters, related to use of mysql_escape_string instead of mysql_real_escape_string.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| advanced website creator | = 0.1 | No fix listed |
| advanced website creator | = 0.2 | No fix listed |
| advanced website creator | = 0.3 | No fix listed |
| advanced website creator | = 1.0_beta_1 | No fix listed |
| advanced website creator | = 1.1_beta_1 | No fix listed |
| advanced website creator | = 1.2 | No fix listed |
| advanced website creator | = 1.3 | No fix listed |
| advanced website creator | = 1.4.1 | No fix listed |
| advanced website creator | = 1.4.2 | No fix listed |
| advanced website creator | = 1.5.0 | No fix listed |
| advanced website creator | = 1.6.0 | No fix listed |
| advanced website creator | = 1.6.1 | No fix listed |
| advanced website creator | = 1.7.0 | No fix listed |
| advanced website creator | = 1.8.0 | No fix listed |
| advanced website creator | = 1.8.1 | No fix listed |
References
- forums.awcreator.com
- 33875 vdb-entry
- 24685 third-party-advisory
- 23268 vdb-entry
- awc-mysqlescape-sql-injection(33388) vdb-entry