CVE-2007-6540

CVE-2007-6540: A SQL injection in neuron news 1.0 is triggered by the q parameter to the default URI in patch/. The vulnerability enables remote execution of arbitrary SQL commands. Root cause: improper handling of user input in the affected patch/ endpoint (no details on code path provided). Imp...