CVE-2007-1122

Multiple SQL injection vulnerabilities in Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued ABC 1.00 and 1.01 allow remote attackers to execute arbitrary SQL commands via the id parameter to the 1 updateRow and 2 deleteRow functions in functions.php, a variant of a SQL injection...

CVE-2007-1122

CVE-2007-1122 affects Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued (ABC) versions 1.00 and 1.01. The vulnerability is a SQL injection in the id parameter used by the functions.php routines updateRow and deleteRow. The flaw enables remote execution of arbitrary SQL commands as ...