CVE-2007-1909: Ryan Haudenschilt Battle.net Clan Script

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in login.php in Ryan Haudenschilt Battle.net Clan Script for PHP 1.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) user or (2) pass parameter.

Affected products

• Ryan Haudenschilt Battle.net Clan Script: any version

Published 2007-04-10. Last modified 2026-06-16.