EUVD-2006-1561

Malware in sbrugna...

Sql injection

Multiple SQL injection vulnerabilities in SkinTech phpNewsManager 1.48 allow remote attackers to execute arbitrary SQL commands via unspecified parameters, possibly 1 id and 2 topicid, in a browse.php, b category.php, c gallery.php, d poll.php, and e possibly other unspecified scripts. NOTE:...

CVE-2006-1560

Multiple SQL injection vulnerabilities in SkinTech phpNewsManager 1.48 allow remote attackers to execute arbitrary SQL commands via unspecified parameters, possibly 1 id and 2 topicid, in a browse.php, b category.php, c gallery.php, d poll.php, and e possibly other unspecified scripts. NOTE:...

CVE-2006-1560

SkinTech phpNewsManager 1.48 is affected by multiple SQL injection vulnerabilities. The issue arises in server-side scripts (browse.php, category.php, gallery.php, poll.php, and possibly others) where user-defined variables are not properly sanitized before being used in SQL queries, allowing rem...