CVE-2007-4112

CVE-2007-4112 affects Advanced Webhost Billing System (AWBS) prior to 2.6.0. When magic_quotes_gpc is disabled, multiple SQL injection vulnerabilities allow remote attackers to execute arbitrary SQL commands via unspecified vectors. The entry notes this can be leveraged for XSS attacks that bypas...