CVE-2006-2139
CVE-2006-2139
Multiple SQL injection vulnerabilities in PHP Newsfeed 20040723 allow remote attackers to execute arbitrary SQL commands via the (1) name parameter to (a) deltables.php, (2) select, (3) header, (4) url, (5) source, or (6) time parameters to (b) manualsubmit.php, (7) num parameter to (c) delete.php, or (8) tablename parameter to (d) searchnews.php.
Productos afectados
n/a · n/a¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →Referencias
http://evuln.com/vulns/129/summary.htmlhttp://secunia.com/advisories/19904https://exchange.xforce.ibmcloud.com/vulnerabilities/26205http://www.osvdb.org/25132http://www.osvdb.org/25133http://www.osvdb.org/25134http://www.osvdb.org/25135http://www.securityfocus.com/bid/17757http://www.vupen.com/english/advisories/2006/1574