7.5
CVSSv2

CVE-2005-2156

Published: 06/07/2005 Updated: 05/09/2008
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in news.php in PHPNews 1.2.5 allows remote malicious users to execute arbitrary SQL commands via the prevnext parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

phpnews phpnews 1.2.5