Vulnerability in Wallpaper Complete Website

CVE-2006-6215

Multiple SQL injection vulnerabilities in Wallpaper Website (Wallpaper Complete Website) 1.0.09 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) login or (2) password parameter to (a) process.php, or the (3) wallpaperid parameter to (b) dlwallpaper.php.

EPSS: 0.011 (61.2th percentile) — read the EPSS interpretation.

Affected products

References