CVE-2005-4403

SQL injection vulnerability in index.php of Marwel 2.7 and earlier allows remote attackers to execute arbitrary SQL commands via the show parameter. Affected software: Marwel (version 2.7 and earlier). Underlying issue: unsafeguarded SQL construction via user-supplied show parameter. CVSS details...