CVE-2007-1438

CVE-2007-1438 describes an SQL injection in the X-Ice News System 1.0, specifically in devami.asp via the id parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD entry assigns a CVSS v2 base score of 7.5 (HIGH) with network access, low attack complexity, and no authenti...