CVE-2005-3956: Undefined Security Weakness

Multiple SQL injection vulnerabilities in index.php in DMANews 0.904 and 0.910 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in a comments action and the 2 sortorder and 3 displaynum parameters in a newslist action...