Description
SQL injection vulnerability in SilverNews 2.0.3 allows remote attackers to execute arbitrary SQL commands via the user field on the login page in the Admin control panel.
References
- 16315 third-party-advisory
- http://www.rgod.altervista.org/silvernews.html
- 14466 vdb-entry
- 18517 vdb-entry
- 1014622 vdb-entry
- silvernews-username-sql-injection(21688) vdb-entry
- 20050803 Silvernews 2.0.3 (possibly previous versions ) SQL Injection / Login Bypass / Remote commands execution / cross site scripting mailing-list