RSS   Vulnerabilities for 'Wf-sections'   RSS

2007-04-11
 
CVE-2007-1974

CWE-Other
 

 
SQL injection vulnerability in the getArticle function in class/wfsarticle.php in WF-Section (aka WF-Sections) 1.0.1, as used in Xoops modules such as (1) Zmagazine 1.0, (2) Happy Linux XFsection 1.07 and earlier, and possibly other modules, allows remote attackers to execute arbitrary SQL commands via the articleid parameter to print.php.

 
2005-03-08
 
CVE-2005-0725

 

 
SQL injection vulnerability in the getAllbyArticle function in wfsfiles.php for WF-Sections (wfsections) 1.07 allows remote attackers to execute arbitrary SQL commands via the articleid parameter to article.php.

 


Copyright 2022, cxsecurity.com

 

Back to Top