CVE-2007-1434

no score yetEPSS 1.0%

SQL injection vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, might allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) userdetail.php, id and (2) url parameter to (b) jump.php, and id variable to (c) detail.php.

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
Published: 2007-03-13
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

grayscale:grayscale_blog

References

http://securityreason.com/securityalert/2417
http://www.securityfocus.com/archive/1/462441/100/0/threaded
http://www.securityfocus.com/bid/22911
http://www.vupen.com/english/advisories/2007/0916
http://securityreason.com/securityalert/2417

Check your stack JSON