CVE-2007-0304: Undefined Security Weakness

SQL injection vulnerability in duyuru.asp in MiNT Haber Sistemi 2.7 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-0304

The connected sources confirm a SQL injection vulnerability in MiNT Haber Sistemi 2.7 affecting duyuru.asp, exploitable via the id parameter to allow remote execution of arbitrary SQL commands. Root cause is improper handling of user input in the SQL query within that script. The vulnerability ma...