CVE-2007-1548

N/A Unknown
Published: March 20, 2007 Modified: April 23, 2026
View on NVD

Description

SQL injection vulnerability in functions/functions_filters.asp in Web Wiz Forums before 8.05a (MySQL version) does not properly filter certain characters in SQL commands, which allows remote attackers to execute arbitrary SQL commands via \"' (backslash double-quote quote) sequences, which are collapsed into \'', as demonstrated via the name parameter to forum/pop_up_member_search.asp.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://ifsec.blogspot.com/2007/03/web-wiz-forums-805-mysql-version-sql.html
Source: cve@mitre.org
Exploit
http://osvdb.org/34344
Source: cve@mitre.org
http://secunia.com/advisories/24561
Source: cve@mitre.org
Vendor Advisory
http://securityreason.com/securityalert/2456
Source: cve@mitre.org
Exploit
http://www.securityfocus.com/archive/1/463287/100/0/threaded
Source: cve@mitre.org
http://www.securityfocus.com/bid/23051
Source: cve@mitre.org
Exploit
http://www.vupen.com/english/advisories/2007/1061
Source: cve@mitre.org
Vendor Advisory
http://www.webwizguide.info/web_wiz_forums/Version%20History.txt
Source: cve@mitre.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/33095
Source: cve@mitre.org
http://ifsec.blogspot.com/2007/03/web-wiz-forums-805-mysql-version-sql.html
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
http://osvdb.org/34344
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/24561
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://securityreason.com/securityalert/2456
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
http://www.securityfocus.com/archive/1/463287/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/23051
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
http://www.vupen.com/english/advisories/2007/1061
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.webwizguide.info/web_wiz_forums/Version%20History.txt
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/33095
Source: af854a3a-2127-422b-91ae-364da2661108

18 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
1.8%
83th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-89

Affected Vendors

webwizguide

Related CVEs

CVE-2026-8696 7.5
CVE-2026-45672 8.8
CVE-2026-45402 8.1
CVE-2026-45401 8.5
CVE-2026-45400 8.5