CVE-2007-6078

SkyPortal RC6 contains multiple SQL injection vulnerabilities that could allow a remote, unauthenticated attacker to gain access to the back-end database and add, modify, or remove data by exploiting vulnerable endpoints such as nc_top.asp, inc_bookmarks.asp, inc_profile_functions.asp, inc_SUBSCR...