CVE-2006-4601

CVE-2006-4601 describes a SQL injection vulnerability in the PHP script index.php of the product Annuaire 1Two 2.2 . The flaw allows remote attackers to execute arbitrary SQL commands by supplying a malicious value for the parameter id . The NVD entry assigns a base score of 7.5 ( HIGH ) with net...