CVE-2007-0305

CVE-2007-0305 describes an SQL injection in etkinlikbak.asp of Okul Web Otomasyon Sistemi 4.0.1. The vulnerability arises from unsafe handling of the id parameter, allowing remote attackers to execute arbitrary SQL commands against the database (impact: data disclosure/ modification). The CVSS ba...