CVE-2007-1295

CVE-2007-1295: SQL injection in AJ Forum 1.0’s topic_title.php via the td_id parameter allows remote command execution. Affected software: AJ Forum 1.0 (topic_title.php). Root cause: input from td_id is used in SQL without proper sanitization, enabling arbitrary SQL execution. Exploitation detail...