CVE-2007-0346

CVE-2007-0346: SQL injection vulnerability in SmE FileMailer 1.21’s index.php allows remote attackers to execute arbitrary SQL commands via the us parameter. Affected software: SmE FileMailer 1.21 (index.php). Root cause: unsafeguarded input in the us parameter enables SQL injection. Impact: pote...

CVE-2007-0350

CVE-2007-0350 describes multiple SQL injection vulnerabilities in SmE FileMailer 1.21 and earlier, affecting index.php and dl.php. The flaw allows remote attackers to inject SQL via the (1) ps, (2) us, (3) f, or (4) code parameters, with the us parameter in index.php already covered by CVE-2007-0...