CVE-2006-4597

CVE-2006-4597 describes a SQL injection vulnerability in the devam.asp component of ICBlogger 2.0 and earlier , due to improper handling of the YID parameter. This flaw enables remote attackers to execute arbitrary SQL commands. The publicly available documents (NVD/NIST CVE entry and related CVE...