CVE-2005-3201

SQL injection vulnerability in news.php for Utopia News Pro (UNP) 1.1.3, when magic_quotes_gpc is disabled and register_globals is enabled, allows remote attackers to execute arbitrary SQL via the newsid parameter.

CVSS Metrics

GitHub Security Advisory GHSA-mh98-9c79-r68x

SQL injection vulnerability in news.php for Utopia News Pro (UNP) 1.1.3, when magic_quotes_gpc is...

References (16)

• http://marc.info/?l=bugtraq&m=112872691119874&w=2
• http://rgod.altervista.org/utopia113.html
• http://secunia.com/advisories/17115/ Patch, Vendor Advisory
• http://securitytracker.com/id?1015016
• http://www.osvdb.org/19942
• http://www.securityfocus.com/bid/15028 Exploit
• http://www.utopiasoftware.net/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22555
• http://marc.info/?l=bugtraq&m=112872691119874&w=2
• http://rgod.altervista.org/utopia113.html
• http://secunia.com/advisories/17115/ Patch, Vendor Advisory
• http://securitytracker.com/id?1015016
• http://www.osvdb.org/19942
• http://www.securityfocus.com/bid/15028 Exploit
• http://www.utopiasoftware.net/