DigitalHive 2.0 RC2 - 'user_id' SQL Injection

body margin:3%; font-size:10px; color:FFFFFF; font-family:Verdana,Arial; background-color:1a1a1a; text-align: center; input background:303030; color:FFFFFF; font-family:Verdana,Arial; font-size:10px; vertical-align:middle; border-left:1px solid 5d5d5d; border-right:1px solid 121212;...

CVE-2002-2046

CVE-2002-2046 affects X-News (x_news) 1.1 and earlier. The flaw allows remote attackers to gain administrative privileges by stealing and replaying the md5_password cookie. The NVD entry lists a CVSSv2 base score of 7.5 (HIGH) with network attack vector, low attack complexity, and no authenticati...

CVE-2002-2046

xnews.php in X-News xnews 1.1 and earlier allows remote attackers to gain administrative privileges by stealing and replaying the md5password cookie...