CVE-2007-0266

CVE-2007-0266 affects Ezboxx Portal System Beta 0.7.6 and earlier, where the boxx/ShowAppendix.asp component is vulnerable to SQL injection via the iid parameter. The vulnerability can allow a remote attacker to inject arbitrary web script or HTML. Documents consistently describe the affected fil...