CVE-2007-2971

The CVE-2007-2971 issue affects gCards 1.46 and earlier, where a SQL injection vulnerability in getnewsitem.php allows remote attackers to execute arbitrary SQL commands via the newsid parameter. This is a server-side input handling flaw, enabling potentially partial confidentiality/integrity/ava...