CVE-2007-6556: Websihirbazi

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in websihirbazi 5.1.1 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to default.asp in a news page action or (2) the pageid parameter to default.asp.

Affected products

• Websihirbazi Websihirbazi: version 5.1.1 only

Published 2007-12-28. Last modified 2026-06-16.