Multiple SQL injection vulnerabilities in newsscript.php in USOLVED NEWSolved 1.1.6, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) jahr or (2) idneu parameter in an archive action, or (3) the newsid parameter.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published: 2009-07-09T16:00:00
Updated: 2024-08-07T05:52:13.694Z
Reserved: 2009-07-09T00:00:00
Link: CVE-2009-2389

No data.

Status : Modified
Published: 2009-07-09T16:30:00.563
Modified: 2024-11-21T01:04:45.537
Link: CVE-2009-2389

No data.