CVEブラウザに戻る

CVE-2006-0716

HIGH

7.5

CVSS Severity Score

EPSS Score0.0860%

EPSS Percentile8.25th

Published2006年2月15日

Last Modified2026年4月16日

Vulnerability Description

SQL injection vulnerability in index.php in sNews 1.3 allows remote attackers to execute arbitrary SQL commands via the (1) category and (2) id parameters.

Affected Platforms (CPE)

📦

Solucija

Snews

= 1.3

References & Advisories

🔗 http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0297.html

🔗 http://securityreason.com/securityalert/431

🔗 http://www.securityfocus.com/archive/1/424958/100/0/threaded

🔗 http://www.securityfocus.com/bid/16647

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/24675

🔗 http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0297.html

🔗 http://securityreason.com/securityalert/431

🔗 http://www.securityfocus.com/archive/1/424958/100/0/threaded

関連する脆弱性情報

CVE-2007-026110.0

snews.php in sNews 1.5.30 and earlier does not properly exit when authentication fails, which allows remote attackers to perform u...

CVE-2016-200529.8

Snews CMS 1.7 contains an unrestricted file upload vulnerability that allows unauthenticated attackers to upload arbitrary files i...

CVE-2007-48419.3

Mozilla Firefox before 2.0.0.8, Thunderbird before 2.0.0.8, and SeaMonkey before 1.1.5 allows remote attackers to execute arbitrar...

CVE-2007-40427.5

Multiple argument injection vulnerabilities in Netscape Navigator 9 allow remote attackers to execute arbitrary commands via a NUL...