Sql injection

2009-01-2118:30:00

PRIOn knowledge base

www.prio-n.com

9.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

27.8%

JSON

Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPNews 0.0.6 allow remote attackers to execute arbitrary SQL commands via the (1) checkuser parameter (aka username field) or (2) checkpass parameter (aka password field) to admin/index.php. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
flexphpnewseq0.0.6 pro
flexphpnewseq0.0.6

CPE	Name	Operator	Version
	flexphpnews	eq	0.0.6 pro
	flexphpnews	eq	0.0.6

References

secunia.com/advisories/33114

securityreason.com/securityalert/4927

www.securityfocus.com/bid/32810

www.exploit-db.com/exploits/7443