← Database

CVE-2007-3190

MEDIUM CVSS: 6.8 Published: 2007-06-12 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in auth.php in Just For Fun Network Management System (JFFNMS) 0.8.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) user and (2) pass parameters.

Affected Platforms

Jffnms Just For Fun Network Management System

Weakness Type

NVD-CWE-Other

References