2 matches found
CVE-2014-125040: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in stevejagodzinski DevNewsAggregator. It has been rated as critical. Affected by this issue is the function getByName of the file php/dataaccess/RemoteHtmlContentDataAccess.php. The manipulation of the argument name leads to sql injection. The name of the patch is...
9.8CVSS5.3AI score0.00658EPSS
SaveExploits0References2
PT-2023-10110 · Stevejagodzinski · Devnewsaggregator
Name of the Vulnerable Software and Affected Versions: stevejagodzinski DevNewsAggregator affected versions not specified Description: A critical issue was found in the function getByName of the file php/data access/RemoteHtmlContentDataAccess.php. The manipulation of the argument name leads to s...
9.8CVSS6.3AI score0.00658EPSS
SaveExploits0References5
20