← Database

CVE-2007-0794

HIGH CVSS: 7.5 Published: 2007-02-06 Modified: 2026-06-16

Description

SQL injection vulnerability in inc/common.php in GlobalMegaCorp dvddb 0.6 allows remote attackers to execute arbitrary SQL commands via the user parameter. NOTE: this issue has been disputed by a reliable third party, who states that inc/common.php only contains function definitions

Affected Platforms

Globalmegacorp Dvddb

Weakness Type

CWE-89

References