CVE-2006-1557

CVE-2006-1557 affects X-Changer 0.2 with multiple SQL injection vulnerabilities. The vulnerable entry notes that remote attackers can execute arbitrary SQL via (1) the from and (2) the into parameters in a calculate action, and (3) the id parameter in an edit action to index.php. The client conte...