CVE-2007-4918

CVE-2007-4918 describes a SQL injection in Gelato’s web app: classes/gelato.class.php vulnerable to arbitrary SQL via the post parameter to index.php . Affected: Gelato (web application). Root cause: unsafely constructed SQL from user input (no sufficient input validation/sanitization). Impact: r...