CVE-2007-6032

CVE-2007-6032 describes an SQL injection vulnerability in calendar/page.asp of Aleris Web Publishing Server 3.0, exploitable via the mode parameter. The issue enables remote attackers to construct and execute arbitrary SQL commands, impacting confidentiality, integrity, and availability to partia...

CVE-2007-6032: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in calendar/page.asp in Aleris Web Publishing Server 3.0 allows remote attackers to execute arbitrary SQL commands via the mode parameter...