CVE-2005-4606

CVE-2005-4606 describes an SQL injection in Web Wiz apps (Site News 3.06 and earlier; Journal 1.0 and earlier; Polls 3.06 and earlier; Database Login 1.71 and earlier) via txtUserName in admin/check_user.asp. Attacker can execute arbitrary SQL commands remotely. Exploitation details, affected ver...

CVE-2006-6212

CVE-2006-6212 describes a PHP remote file inclusion in Site News (site_news) 2.00 and possibly earlier, where an attacker can cause arbitrary PHP code execution by supplying a URL in the page parameter. Affected component: centre.php. The vulnerability enables arbitrary code execution on the serv...