CVE-2007-3648: Valarsoft Webmatic

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in Webmatic before 2.6.2, and possibly other versions before 2.7, allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly related to admin/admin_album.php and admin/admin_downloads.php. NOTE: some of these details are obtained from third party information.

Affected products

• Valarsoft Webmatic: up to and including 2.6; version 2.6.1 only

Published 2007-07-10. Last modified 2026-06-16.