CVE-2014-4307

Summary: CVE-2014-4307 is a SQL injection vulnerability in WebTitan’s categories-x.php, exploitable via the sortkey parameter to execute arbitrary SQL on affected installations. The issue is described as affecting WebTitan versions prior to 4.04. Multiple connected sources corroborate this vulner...