CVE-2017-7410 Multiple SQL injection vulnerabilities in account/signup.php and account/signup2.php in WebsiteBaker 2.10.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username, (...
CriticalCVSS 9.8
EPSS 3.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in account/signup.php and account/signup2.php in WebsiteBaker 2.10.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username, (2) display_name parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| websitebaker | <= 2.10.0 | No fix listed |
References
- forum.websitebaker.org
- project.websitebaker.org vendor-advisory
- 97495 third-party-advisory vdb-entry
- 1038173 third-party-advisory vdb-entry