Description
Multiple SQL injection vulnerabilities in Wallpaper Site 1.0.09 allow remote attackers to execute arbitrary SQL commands via (1) the catid parameter to category.php or (2) the groupid parameter to editadgroup.php.
Exploits (1)
References (4)
Core 4
Core References
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/26984
Exploit, Third Party Advisory exploit
x_refsource_exploit-db
https://www.exploit-db.com/exploits/4770
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/40369
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/40368
Scores
EPSS
0.0046
EPSS Percentile
64.3%
Details
CWE
CWE-89
Status
published
Products (1)
wallpaper/wallpaper_complete_website
1.0.09
Published
Dec 28, 2007
Tracked Since
Feb 18, 2026