CVE-2006-1837

The CVE-2006-1837 entry describes a SQL injection in Fuju News 1.0, specifically in archiv2.php, where the ID parameter allows remote attackers to execute arbitrary SQL commands. The vulnerability is due to improper input handling, with a CVSS2 base score of 7.5 (HIGH) and network attack vector w...

CVE-2006-1838

The CVE-2006-1838 entry concerns Fuju News 1.0. The flaw is in edit_kategorie.php where remote attackers can bypass authentication by manipulating the authorized cookie, enabling unauthorized access. The available connected documents corroborate that the root cause is an authentication bypass via...