CVE-2007-4952

Affected software: OmniStar Article Manager. Vulnerability (CVE-2007-4952): SQL injection in article.php via the page_id parameter in a favorite op action, a different vector than CVE-2006-5917; remote attackers may execute arbitrary SQL commands. Related entry CVE-2006-5917 describes multiple SQ...

CVE-2006-5917

Affected software: OmniStar Article Manager. Vulnerability details: Multiple SQL injection vulnerabilities allow remote attackers to execute arbitrary SQL via (1) article_id in articles/comments.php and articles/article.php, and (2) page_id in articles/pages.php. Root cause: improper handling of ...