EUVD-2006-2140

Malware in sbrugna...

Sql injection

Multiple SQL injection vulnerabilities in PHP Newsfeed 20040723 allow remote attackers to execute arbitrary SQL commands via the 1 name parameter to a deltables.php, 2 select, 3 header, 4 url, 5 source, or 6 time parameters to b manualsubmit.php, 7 num parameter to c delete.php, or 8 tablename...

CVE-2006-2139

Multiple SQL injection vulnerabilities in PHP Newsfeed 20040723 allow remote attackers to execute arbitrary SQL commands via the 1 name parameter to a deltables.php, 2 select, 3 header, 4 url, 5 source, or 6 time parameters to b manualsubmit.php, 7 num parameter to c delete.php, or 8 tablename...

CVE-2006-2139

Multiple SQL injection vulnerabilities in PHP Newsfeed 20040723 allow remote attackers to execute arbitrary SQL commands via the 1 name parameter to a deltables.php, 2 select, 3 header, 4 url, 5 source, or 6 time parameters to b manualsubmit.php, 7 num parameter to c delete.php, or 8 tablename...

CVE-2006-2139

The CVE-2006-2139 entry concerns PHP Newsfeed 20040723, which exposes multiple SQL injection flaws in several scripts: deltables.php (parameter: name), manualsubmit.php (parameters: select, header, url, source, time), delete.php (parameter: num), and searchnews.php (parameter: tablename). The und...

CVE-2006-2139: Undefined Security Weakness

Multiple SQL injection vulnerabilities in PHP Newsfeed 20040723 allow remote attackers to execute arbitrary SQL commands via the 1 name parameter to a deltables.php, 2 select, 3 header, 4 url, 5 source, or 6 time parameters to b manualsubmit.php, 7 num parameter to c delete.php, or 8 tablename...