← Database

CVE-2007-3909

HIGH CVSS: 7.5 Published: 2007-07-19 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in Bandersnatch 0.4 allow remote attackers to execute arbitrary SQL commands via the (1) date and (2) limit parameters to index.php, and other unspecified vectors.

Affected Platforms

Bandersnatch Bandersnatch

Weakness Type

CWE-89

References