2 matches found
CVE-2008-6517
SQL injection in NewsHOWLER 1.03 Beta allows remote attackers to execute arbitrary SQL commands via the news_user cookie parameter. Vulnerable component is the input handling of the news_user cookie, leading to partial confidentiality/integrity/availability impact as per CVSS v2 (base score 7.5, ...
7.5CVSS8.7AI score0.00971EPSS
SaveExploits2References4Affected Software1
20