CVEvulnerability
CVE-2006-0413
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-01-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in index.php in NewsPHP allow remote attackers to execute arbitrary SQL commands via the (1) discuss, (2) tim, (3) id, (4) last, and (5) limit parameter.
Affected configurations
• newsphp newsphp
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/18624 Vendor Advisory
- http://www.osvdb.org/22717 www.osvdb.org
- http://www.securityfocus.com/archive/1/423129/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16339 Exploit
- http://www.vupen.com/english/advisories/2006/0341 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24320 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/18624 Vendor Advisory
- http://www.osvdb.org/22717 www.osvdb.org
- http://www.securityfocus.com/archive/1/423129/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16339 Exploit
- http://www.vupen.com/english/advisories/2006/0341 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24320 exchange.xforce.ibmcloud.com