EUVD-2006-3356

Malware in sbrugna...

CVE-2006-3359: Undefined Security Weakness

Multiple SQL injection vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject arbitrary web script or HTML via the 1 words, 2 id, 3 topmenuitem, and 4 catid parameters in a index.php; and the 5 category parameter in b inc/rssfeed.php...