CVE-2007-6586

SQL injection vulnerability in sezione_news.php in nicLOR-CMS allows remote attackers to execute arbitrary SQL commands via the id parameter in a sezione page action to index.php.

• http://osvdb.org/39789
• http://secunia.com/advisories/28222
• http://www.securityfocus.com/bid/26983
  Exploit
• https://www.exploit-db.com/exploits/4762
• http://osvdb.org/39789
• http://secunia.com/advisories/28222
• http://www.securityfocus.com/bid/26983
  Exploit
• https://www.exploit-db.com/exploits/4762