CVE-2006-1500

CVE-2006-1500 describes a SQL injection in the Tilde CMS 3.0 implementation of index.php, exploitable via the id parameter to allow remote execution of arbitrary SQL commands. The related NVD entry lists a base score of 7.5 (HIGH) with NETWORK attack vector and no authentication, and partial impa...