Description (CNA)
Multiple SQL injection vulnerabilities in PHP Newsfeed 20040723 allow remote attackers to execute arbitrary SQL commands via the (1) name parameter to (a) deltables.php, (2) select, (3) header, (4) url, (5) source, or (6) time parameters to (b) manualsubmit.php, (7) num parameter to (c) delete.php, or (8) tablename parameter to (d) searchnews.php.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.osvdb.org/25133
- http://www.osvdb.org/25135
- http://www.osvdb.org/25134
- http://www.osvdb.org/25132
- http://www.vupen.com/english/advisories/2006/1574
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26205
- http://evuln.com/vulns/129/summary.html
- http://secunia.com/advisories/19904
- http://www.securityfocus.com/bid/17757
ADP enrichment
No English description supplied.
- http://www.osvdb.org/25133
- http://www.osvdb.org/25135
- http://www.osvdb.org/25134
- http://www.osvdb.org/25132
- http://www.vupen.com/english/advisories/2006/1574
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26205
- http://evuln.com/vulns/129/summary.html
- http://secunia.com/advisories/19904
- http://www.securityfocus.com/bid/17757