CVE-2006-2720

SQL injection in VARIOMAT's news.php (parameter subcat) allows remote attackers to execute arbitrary SQL commands. CVE-2006-2720; impacted: VARIOMAT news.php. Risk: CVSS v2 base score 7.5 (HIGH). No remediation details provided in the supplied documents.