CVE-2007-6311
SQL injection vulnerability in (1) index.php, and possibly (2) admin/index.php, in Falt4Extreme RC4 10.9.2007 allows remote attackers to execute arbitrary SQL commands via the nav_ID parameter.
Date published : 2007-12-11
http://www.securityfocus.com/bid/26786
http://www.securityfocus.com/archive/1/484813/100/0/threaded
