CVE-2008-4347

SQL injection vulnerability in newskom.php in Powie pNews 2.03 allows remote attackers to execute arbitrary SQL commands via the newsid parameter...

Sql injection

SQL injection vulnerability in newskom.php in Powie pNews 2.03 allows remote attackers to execute arbitrary SQL commands via the newsid parameter...

CVE-2008-4347

CVE-2008-4347 affects Powie pNews 2.03 (component: newskom.php). The vulnerability is a SQL injection via the newsid parameter, enabling remote attackers to execute arbitrary SQL commands. NVD lists a CVSS2 base score of 7.5 (HIGH) with network attack vector, low attack complexity, and no authent...

pNews 2.03 - 'newsid' SQL Injection

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu ---QKrun1x-P47tr1ck - FeDeReR -MAGE -JeTFyrE and all darkc0de members ---...