CVE-2007-2342

CVE-2007-2342 describes an SQL injection in error.asp of CreaScripts CreaDirectory 1.2. The vulnerability allows remote attackers to execute arbitrary SQL commands via the id parameter, as a different vector from CVE-2006-6083. According to the NVD entry, the issue is exploitable over a network w...