CVE-2006-1108

NMDeluxe is affected by a SQL injection in news.php via the id parameter, allowing remote attackers to execute arbitrary SQL commands. This vulnerability exists in versions before 1.0.1. Exploitation details are referenced in connected records (eVuln/DOC notes PoC). Remediation: upgrade to versio...