CVE-2007-6634

CVE-2007-6634 describes multiple SQL injection vulnerabilities in FAQMasterFlexPlus , possibly versions 1.5 or 1.52 . The issue allows remote attackers to execute arbitrary SQL commands via the category_id parameter to faq.php , and potentially via other scripts. The sources indicate an unauthent...