EUVD-2007-4610

Malware in sbrugna...

Sql injection

SQL injection vulnerability in shownews.php in phpns 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-4628

An SQL injection vulnerability affects phpns 1.1 (shownews.php) where the id parameter is unsafely used, allowing remote attackers to execute arbitrary SQL commands. This allows impact to data confidentiality, integrity, and availability as per CVSS 2.0 (AV:N/AC:L/Au:N/C:P/I:P/A:P). No remediatio...