PT-2015-3676

Name of the Vulnerable Software and Affected Versions Taboada MacroNews version 1.0 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the id parameter in the news popup.php file. Recommendations For Taboada MacroNews version 1.0,...