Sql injection

SQL injection vulnerability in news.php in AZNEWS allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2006-2136

SQL injection vulnerability in news.php in AZNEWS allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2006-2136

CVE-2006-2136 describes an SQL injection vulnerability in the AZNEWS system, specifically in news.php where the ID parameter can be manipulated by an attacker to cause arbitrary SQL commands to execute remotely. The vulnerability is documented across multiple sources (NVD, CVE list, PRION, CVELIS...