Security Advisory

CVE-2007-6391

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2007-12-17 18:00:00

Last updated 2024-08-07 16:02:36

Assigner mitre

State PUBLISHED

SQL injection vulnerability in patch/comments.php in SH-News 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.