CVE-2007-0765

CVE-2007-0765 affects the dB Masters Curium CMS (version 1.03 and earlier). The vulnerability is a SQL injection in news.php where the attacker can manipulate the c_id parameter to execute arbitrary SQL commands. The NVD entry lists a NETWORK -based, LOW -complexity exploit with no authentication...