Description
Multiple SQL injection vulnerabilities in Web4Future News Portal allow remote attackers to execute arbitrary SQL commands via the ID parameter to (1) comentarii.php or (2) view.php.
References
- newsportal-comentarii-view-sql-injection(26260) vdb-entry
- 25286 vdb-entry
- 1016027 vdb-entry
- 25285 vdb-entry
- 17880 third-party-advisory