CVE-2007-5016

The CVE-2007-5016 entry describes a SQL injection in OneCMS 2.4, specifically in userreviews.php, exploitable via the abc parameter to allow remote SQL execution. The affected component is the userreviews.php path in OneCMS 2.4; root cause is improper handling of the abc parameter leading to SQL ...