Multiple SQL injection vulnerabilities in newsscript.php in USOLVED NEWSolved 1.1.6, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) jahr or (2) idneu parameter in an archive action, or (3) the newsid parameter.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2009-07-09T16:00:00
Updated: 2024-08-07T05:52:13.694Z
Reserved: 2009-07-09T00:00:00
Link: CVE-2009-2389
Vulnrichment
No data.
NVD
Status : Modified
Published: 2009-07-09T16:30:00.563
Modified: 2024-11-21T01:04:45.537
Link: CVE-2009-2389
Redhat
No data.