system
Describe <CVE-2007-1298>.
user
What is <CVE-2007-1298>?
assistant
SQL injection vulnerability in subcat.php in AJ Auction 1.0 allows remote attackers to execute arbitrary SQL commands via the cate_id parameter..