RSS   Vulnerabilities for 'Php newsfeed'   RSS

2006-05-02
 
CVE-2006-2139

 

 
Multiple SQL injection vulnerabilities in PHP Newsfeed 20040723 allow remote attackers to execute arbitrary SQL commands via the (1) name parameter to (a) deltables.php, (2) select, (3) header, (4) url, (5) source, or (6) time parameters to (b) manualsubmit.php, (7) num parameter to (c) delete.php, or (8) tablename parameter to (d) searchnews.php.

 


Copyright 2024, cxsecurity.com

 

Back to Top