CVE-2005-0725: Wf-Sections

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in the getAllbyArticle function in wfsfiles.php for WF-Sections (wfsections) 1.07 allows remote attackers to execute arbitrary SQL commands via the articleid parameter to article.php.

Affected products

• Wf-Sections Wf-Sections: version 1.07 only

Published 2005-03-08. Last modified 2026-06-16.