Back
CVE-2005-1237
SQL injection vulnerability in news.php in FlexPHPNews 0.0.3 allows remote attackers to execute arbitrary SQL commands via the newsid parameter.
Published: May 2, 2005
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| china-on-site | flexphpnews | * |
GitHub Security Advisory GHSA-rwjx-xcwh-hf46
SQL injection vulnerability in news.php in FlexPHPNews 0.0.3 allows remote attackers to execute...
References (18)
- http://secunia.com/advisories/14905
- http://www.attrition.org/pipermail/vim/2007-April/001506.html
- http://www.osvdb.org/15715
- http://www.securityfocus.com/bid/13297
- http://www.securityfocus.com/bid/23247
- http://www.vupen.com/english/advisories/2005/0373
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20214
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33362
- https://www.exploit-db.com/exploits/3631
- http://secunia.com/advisories/14905
- http://www.attrition.org/pipermail/vim/2007-April/001506.html
- http://www.osvdb.org/15715
- http://www.securityfocus.com/bid/13297
- http://www.securityfocus.com/bid/23247
- http://www.vupen.com/english/advisories/2005/0373
Risk Scores
CVSS Score
7.5 / 10
EPSS Score
2.25%
Top 19% most likely to be exploited
Threat Score
30.7 / 100
Data Sources
NVD
EPSS
GitHub