CVE-2006-3919

CVE-2006-3919 concerns a SQL injection in SD Studio CMS, specifically in index.php. The vulnerability allows remote attackers to inject arbitrary SQL through the parameters (1) news_id, (2) tid, and (3) page_id. CVSS v2 base score is 7.5 (HIGH) with network attack vector, low attack complexity, n...