CVE-2006-1108

SQL injection vulnerability in news.php in NMDeluxe before 1.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS Metrics

Affected Products (1)

GitHub Security Advisory GHSA-jj78-mxg8-xc54

SQL injection vulnerability in news.php in NMDeluxe before 1.0.1 allows remote attackers to...

References (16)

• http://evuln.com/vulns/93/summary.html Patch
• http://nmdeluxe.com/index.php Patch, URL Repurposed
• http://secunia.com/advisories/19117 Patch, Vendor Advisory
• http://securityreason.com/securityalert/595
• http://www.securityfocus.com/archive/1/428002/100/0/threaded
• http://www.securityfocus.com/bid/17017
• http://www.vupen.com/english/advisories/2006/0860
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25070
• http://evuln.com/vulns/93/summary.html Patch
• http://nmdeluxe.com/index.php Patch, URL Repurposed
• http://secunia.com/advisories/19117 Patch, Vendor Advisory
• http://securityreason.com/securityalert/595
• http://www.securityfocus.com/archive/1/428002/100/0/threaded
• http://www.securityfocus.com/bid/17017
• http://www.vupen.com/english/advisories/2006/0860