Security Advisory
CVE-2007-0223
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in shared/code/cp_functions_downloads.php in Nicola Asuni All In One Control Panel (AIOCP) before 1.3.009 allows remote attackers to execute arbitrary SQL commands via the download_category parameter.