Description
Multiple SQL injection vulnerabilities in Wuzly 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) u parameter to fp.php, (2) epage parameter to newpage.php, (3) epost parameter to newpost.php, and (4) username parameter to login.php in admin/; or the (5) username parameter to mobile/login.php.
References (8)
Core 8
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/77916
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/77915
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/77918
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/71904
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/77917
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/46163
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/77919
Vendor Advisory x_refsource_misc
http://secunia.com/secunia_research/2011-88/
Scores
EPSS
0.0141
EPSS Percentile
69.9%
Details
CWE
CWE-89
Status
published
Products (1)
wuzly/wuzly
2.0
Published
Dec 24, 2011
Tracked Since
Feb 18, 2026