high7.5
CVE-2006-0716
SQL injection vulnerability in index.php in sNews 1.3 allows remote attackers to execute arbitrary SQL commands via the (1) category and (2) id parameters.
Impact
SQL injection vulnerability in index.php in sNews 1.3 allows remote attackers to execute arbitrary SQL commands via the (1) category and (2) id parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Solucija | Snews | Version 1.3 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0297.html
- http://securityreason.com/securityalert/431
- http://www.securityfocus.com/archive/1/424958/100/0/threaded
- http://www.securityfocus.com/bid/16647
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24675
- http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0297.html
- http://securityreason.com/securityalert/431
- http://www.securityfocus.com/archive/1/424958/100/0/threaded
- http://www.securityfocus.com/bid/16647
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24675