high7.5
CVE-2006-5908
Multiple SQL injection vulnerabilities in the login_user function in yans.func.php in Lucas Rodriguez San Pedro Yet Another News System (YANS) 0.2b allow remot…
Impact
Multiple SQL injection vulnerabilities in the login_user function in yans.func.php in Lucas Rodriguez San Pedro Yet Another News System (YANS) 0.2b allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lucas Rodriguez San Pedro | Yet Another News System | Version 0.2b |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2006-11/0121.html
- http://securityreason.com/securityalert/1866
- http://www.securityfocus.com/bid/20963
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30119
- http://archives.neohapsis.com/archives/bugtraq/2006-11/0121.html
- http://securityreason.com/securityalert/1866
- http://www.securityfocus.com/bid/20963
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30119