CVE-2006-2139
CVE-2006-2139
Multiple SQL injection vulnerabilities in PHP Newsfeed 20040723 allow remote attackers to execute arbitrary SQL commands via the (1) name parameter to (a) deltables.php, (2) select, (3) header, (4) url, (5) source, or (6) time parameters to (b) manualsubmit.php, (7) num parameter to (c) delete.php, or (8) tablename parameter to (d) searchnews.php.
Produtos afetados
n/a · n/aQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →Referências
http://evuln.com/vulns/129/summary.htmlhttp://secunia.com/advisories/19904https://exchange.xforce.ibmcloud.com/vulnerabilities/26205http://www.osvdb.org/25132http://www.osvdb.org/25133http://www.osvdb.org/25134http://www.osvdb.org/25135http://www.securityfocus.com/bid/17757http://www.vupen.com/english/advisories/2006/1574