Description
Multiple SQL injection vulnerabilities in PHP Newsfeed 20040723 allow remote attackers to execute arbitrary SQL commands via the (1) name parameter to (a) deltables.php, (2) select, (3) header, (4) url, (5) source, or (6) time parameters to (b) manualsubmit.php, (7) num parameter to (c) delete.php, or (8) tablename parameter to (d) searchnews.php.
References
- 25133 vdb-entry
- 25135 vdb-entry
- 25134 vdb-entry
- 25132 vdb-entry
- ADV-2006-1574 vdb-entry
- phpnewsfeed-multiple-sql-injection(26205) vdb-entry
- http://evuln.com/vulns/129/summary.html
- 19904 third-party-advisory
- 17757 vdb-entry