CVE-2007-1556

CVE-2007-1556 describes an SQL injection in Creative Files 1.2, via kommentare.php the dlid parameter. The root cause is lack of input validation, allowing remote attackers to execute arbitrary SQL. Impact per records: partial confidentiality/integrity/availability with a CVSS v2 base score of 7....