CVE-2007-0304

The connected sources confirm a SQL injection vulnerability in MiNT Haber Sistemi 2.7 affecting duyuru.asp, exploitable via the id parameter to allow remote execution of arbitrary SQL commands. Root cause is improper handling of user input in the SQL query within that script. The vulnerability ma...