CVE-2005-3853

SQL injection vulnerability in snews.php in sNews 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) category parameters to index.php.

CVSS Metrics

Affected Products (2)

GitHub Security Advisory GHSA-4mhm-g758-5p6c

SQL injection vulnerability in snews.php in sNews 1.3 and earlier allows remote attackers to...

References (8)

• http://pridels0.blogspot.com/2005/11/snews-13-sql-injection.html
• http://secunia.com/advisories/17688 Vendor Advisory
• http://www.osvdb.org/21093
• http://www.vupen.com/english/advisories/2005/2585
• http://pridels0.blogspot.com/2005/11/snews-13-sql-injection.html
• http://secunia.com/advisories/17688 Vendor Advisory
• http://www.osvdb.org/21093
• http://www.vupen.com/english/advisories/2005/2585