CVE-2005-4010

CVE-2005-4010 describes a SQL injection in KBase Express 1.0.0 and earlier . The vulnerability is triggered via the id parameter to category.php and search parameters to search.php , permitting remote attackers to execute arbitrary SQL commands. The NVD entry lists a CVSS v2 base score of 7.5 (HI...