CVE-2006-6923

SQL injection vulnerability in newsletters/edition.php in bitweaver 1.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the tk parameter.

Date published : 2007-01-12

http://www.securityfocus.com/bid/20988

http://www.securityfocus.com/bid/20996