CVE-2005-3201

CVE-2005-3201 concerns Utopia News Pro (UNP) 1.1.3. The vulnerability is an SQL injection in news.php when magic_quotes_gpc is disabled and register_globals is enabled, allowing remote attackers to modify/obtain data via the newsid parameter. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH)...

CVE-2005-3201

SQL injection vulnerability in news.php for Utopia News Pro UNP 1.1.3, when magicquotesgpc is disabled and registerglobals is enabled, allows remote attackers to execute arbitrary SQL via the newsid parameter...