CVE-2006-0413

Publication date

2006-01-25 11:00:00

Family

mitre

State

PUBLISHED

Description

Multiple SQL injection vulnerabilities in index.php in NewsPHP allow remote attackers to execute arbitrary SQL commands via the (1) discuss, (2) tim, (3) id, (4) last, and (5) limit parameter.