CVE-2007-1909

Published: Apr 10, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in login.php in Ryan Haudenschilt Battle.net Clan Script for PHP 1.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) user or (2) pass parameter.

Affected (1)

Products: Ryan Haudenschilt: Battle.net Clan Script

Ryan Haudenschilt

1 product

Battle.net Clan Script

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ryan Haudenschilt Battle.net Clan Script	All versions

References (10)

http://osvdb.org/34747

Source: cve@mitre.org

http://secunia.com/advisories/24838

Source: cve@mitre.org

http://www.securityfocus.com/bid/23383

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1313

Source: cve@mitre.org

https://www.exploit-db.com/exploits/3691

Source: cve@mitre.org

http://osvdb.org/34747