CVE-2007-6345

CVE-2007-6345: A SQL injection vulnerability in the aurora framework (before 20071208) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, potentially through the value parameter to pack_var in module/db.lib/db_mysql.lib. The issue is rooted in improper input handli...