CVE-2007-1293

CVE-2007-1293 concerns a SQL injection in Rigter Portal System (RPS) 6.2 when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to inject arbitrary SQL commands via the categoria parameter to the top-level URI (index.php), with a possible relation to ver_descarga.php. The NV...