CVE-2006-5128
SQL injection vulnerability in index.php in Bartels Schoene ConPresso before 4.0.5a allows remote attackers to execute arbitrary SQL commands via the nr parameter.
Date published : 2006-10-02
http://www.securityfocus.com/bid/20273
http://www.securityfocus.com/archive/1/447358/100/0/threaded
