CVE-2007-4156

CVE-2007-4156 affects wolioCMS and describes multiple SQL injection vulnerabilities. The issues enable remote attackers to execute arbitrary SQL commands via: (1) the id parameter to member.php in a page action (related to a SELECT in common.php); (2) the loginid parameter (uid variable); and (3)...