CVE-2006-4350

The CVE-2006-4350 issue affects OneOrZero 1.6.4.1 where a flaw in index.php allows SQL injection through the id parameter. The underlying root cause is improper handling of user-supplied input in a SQL query, enabling remote commands execution. Documented impact indicates partial confidentiality,...