CVE-2009-0705

CVE-2009-0705 describes a SQL injection inPowerScripts PowerNews 2.5.4, specifically in news.php when magic_quotes_gpc is disabled, allowing remote attackers to inject SQL via the newsid parameter. Affected product: PowerNews 2.5.4. Root cause: improper input handling that enables SQL command exe...

CVE-2009-0705

creationtimestamp| type| source ---|---|--- 2009-01-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7641...