CVE-2006-3236

Multiple SQL injection vulnerabilities affect thinkWMS 1.0 and earlier. The flaws allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in index.php or printarticle.php, and the (2) catid parameter in index.php. The NVD record rates the base impact as high (CVSSv2: 7.5...