CVE-2007-4845

CVE-2007-4845 describes multiple SQL injection vulnerabilities in RW::Download 2.0.3 lite, specifically in UPLOAD/index.php. The issue allows remote attackers to execute arbitrary SQL commands via the (1) dlid or (2) cid parameters. Documented impact is partial confidentiality, integrity, and ava...