CVE-2008-4347

SQL injection vulnerability in newskom.php in Powie pNews 2.03 allows remote attackers to execute arbitrary SQL commands via the newsid parameter...

Sql injection

SQL injection vulnerability in newskom.php in Powie pNews 2.03 allows remote attackers to execute arbitrary SQL commands via the newsid parameter...

CVE-2008-4347

CVE-2008-4347 affects Powie pNews 2.03 (component: newskom.php). The vulnerability is a SQL injection via the newsid parameter, enabling remote attackers to execute arbitrary SQL commands. NVD lists a CVSS2 base score of 7.5 (HIGH) with network attack vector, low attack complexity, and no authent...

CVE-2008-4347: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in newskom.php in Powie pNews 2.03 allows remote attackers to execute arbitrary SQL commands via the newsid parameter...

pNews 2.03 - 'newsid' SQL Injection

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu ---QKrun1x-P47tr1ck - FeDeReR -MAGE -JeTFyrE and all darkc0de members ---...