CVE-2007-1548

no score yetEPSS 1.8%

webwizguide web wiz forums: no CVSS score yet. EPSS 1.8% chance of exploitation in the next 30 days.

SQL injection vulnerability in functions/functions_filters.asp in Web Wiz Forums before 8.05a (MySQL version) does not properly filter certain characters in SQL commands, which allows remote attackers to execute arbitrary SQL commands via \"' (backslash double-quote quote) sequences, which are collapsed into \'', as demonstrated via the name parameter to forum/pop_up_member_search.asp.

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2007-03-20
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

webwizguide:web_wiz_forums

References

http://ifsec.blogspot.com/2007/03/web-wiz-forums-805-mysql-version-sql.html
http://osvdb.org/34344
http://secunia.com/advisories/24561
http://securityreason.com/securityalert/2456
http://www.securityfocus.com/archive/1/463287/100/0/threaded

Check your stack JSON