CVE-2007-1696

CVE-2007-1696 describes a SQL injection in ViewNewspapers.asp for Active Newsletter 4.3 and earlier. The vulnerability is triggered via the NewsPaperID parameter, allowing remote attackers to execute arbitrary SQL commands. The affected component is the ViewNewspapers.asp page within the Active N...