Unscored CVE-2006-0716 EUVD-2006-0723GHSA-mgvr-v627-68mp

SQL injection vulnerability in index.php in sNews 1.3 allows remote attackers to execute arbitrary SQL commands via the (1) category and (2…

Published Feb 15, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in index.php in sNews 1.3 allows remote attackers to execute arbitrary SQL commands via the (1) category and (2) id parameters.

References

20060214 XSS bugs and SQL injection in sNews mailing-list
431 third-party-advisory
20060214 XSS and SQL injection in sNews mailing-list
snews-index-sql-injection(24675) vdb-entry
16647 vdb-entry