Unscored CVE-2006-2879 EUVD-2006-2876GHSA-g27x-xj6q-h3q3

SQL injection vulnerability in newscomments.php in Alex News-Engine 1.5.0 and earlier allows remote attackers to execute arbitrary SQL comm…

Published Jun 7, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in newscomments.php in Alex News-Engine 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the newsid parameter.

References

alexnews-newscomments-sql-injection(26946) vdb-entry
20469 third-party-advisory
20060605 ewsEngine <= 1.5.0(newscomments.php) Remote SQL Injection Vulnerability mailing-list
ADV-2006-2151 vdb-entry
18274 vdb-entry
1057 third-party-advisory