CVE-2007-2898

The CVE-2007-2898 entry describes an SQL injection vulnerability in the 2z Project 0.9.5, specifically in the file includes/rating.php where user input from the rating parameter to index.php is unsafely handled. This leads to the possibility of remote attackers executing arbitrary SQL commands. T...