Back

CVE-2005-4207

SQL injection vulnerability in BTGrup Admin WebController Script allows remote attackers to execute SQL commands via the (1) Username and (2) Password fields.

Published: Dec 13, 2005 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
btgrup admin_webcontroller_script *

GitHub Security Advisory GHSA-r556-vcf9-958h

SQL injection vulnerability in BTGrup Admin WebController Script allows remote attackers to...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 1.16%

Top 35% most likely to be exploited

Threat Score 30.3 / 100

Data Sources

NVD EPSS GitHub