CVE-2007-1417
SQL injection vulnerability in index.php in HC NEWSSYSTEM 1.0-4 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a komm aktion.
Date published : 2007-03-12
http://www.securityfocus.com/bid/22898
http://www.securityfocus.com/archive/1/462347/100/0/threaded