CVE-2007-1566

CVE-2007-1566 describes a SQL injection vulnerability in NetVIOS Portal, specifically in News/page.asp where the NewsID parameter can be exploited to execute arbitrary SQL commands. The issue affects NetVIOS 2.0 and earlier (per cross-reference CVE-2006-5954) and is exploitable by remote attacker...