EUVD-2014-1212

Malware in sbrugna...

CVE-2014-125040: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in stevejagodzinski DevNewsAggregator. It has been rated as critical. Affected by this issue is the function getByName of the file php/dataaccess/RemoteHtmlContentDataAccess.php. The manipulation of the argument name leads to sql injection. The name of the patch is...