CVE-2007-6580: Wallpaper Complete Website

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Wallpaper Site 1.0.09 allow remote attackers to execute arbitrary SQL commands via (1) the catid parameter to category.php or (2) the groupid parameter to editadgroup.php.

Affected products

• Wallpaper Wallpaper Complete Website: version 1.0.09 only

Published 2007-12-28. Last modified 2026-06-16.