CVE-2006-1501

CVE-2006-1501 describes a SQL injection in OneOrZero 1.6.3.0, where the vulnerable vector is the id parameter (possibly in the kans action) in index.php. The vulnerability allows remote attackers to alter SQL commands; CVSS v2 base score is 7.5 ( HIGH ) with network access, low attack complexity,...