3 matches found
Sql injection
SQL injection vulnerability in newspopup.php in Taboada MacroNews 1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter...
6.5CVSS8.6AI score0.01116EPSS
SaveExploits2References3Affected Software1
CVE-2014-10032
CVE-2014-10032 affects the Taboada MacroNews 1.0 software, specifically the web component news_popup.php. The vulnerability is an SQL injection via the id parameter that can be exploited by remote authenticated users to execute arbitrary SQL commands. The affected product appears in public record...
6.5CVSS8.2AI score0.01116EPSS
SaveExploits2References3Affected Software1
20