CVE-2006-3346

The CVE-2006-3346 entry concerns a SQL injection in tree.php on MyNewsGroups 0.6, exploitable via the grp_id parameter to remotely execute arbitrary SQL. The provided documents identify the affected product and the vulnerable parameter but do not specify the root cause details beyond generic SQL ...