CVE-2007-1417

The CVE-2007-1417 entry documents an SQL injection vulnerability in HC NEWSSYSTEM 1.0-4, exploitable via the ID parameter in index.php (komm aktion). The root cause is improper input handling leading to arbitrary SQL execution by remote attackers. Impact is partial confidentiality, integrity, and...