Web Publishing Server Security Vulnerabilities - February

CVE-2007-6032

SQL injection vulnerability in calendar/page.asp in Aleris Web Publishing Server 3.0 allows remote attackers to execute arbitrary SQL commands via the mode parameter.