CVE

Id
17647  
CVE No.
CVE-2006-1543  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) loginvar parameter in (a) admin/admin.php, and the (2) news and (3) nom parameters in (b) news.php.  
Phase
Assigned (20060330)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
147590 17647 CVE-2006-1543 BUGTRAQ:20060411 [eVuln] VNews Multiple Vulnerabilities  View
147591 17647 CVE-2006-1543 URL:http://www.securityfocus.com/archive/1/archive/1/430674/100/0/threaded  View
147592 17647 CVE-2006-1543 MISC:http://www.evuln.com/vulns/112  View
147593 17647 CVE-2006-1543 BID:17316  View
147594 17647 CVE-2006-1543 URL:http://www.securityfocus.com/bid/17316  View
147595 17647 CVE-2006-1543 VUPEN:ADV-2006-1173  View
147596 17647 CVE-2006-1543 URL:http://www.vupen.com/english/advisories/2006/1173  View
147597 17647 CVE-2006-1543 OSVDB:24273  View
147598 17647 CVE-2006-1543 URL:http://www.osvdb.org/24273  View
147599 17647 CVE-2006-1543 OSVDB:24274  View
147600 17647 CVE-2006-1543 URL:http://www.osvdb.org/24274  View
147601 17647 CVE-2006-1543 SECUNIA:19435  View
147602 17647 CVE-2006-1543 URL:http://secunia.com/advisories/19435  View
147603 17647 CVE-2006-1543 XF:vnews-adminnews-sql-injection(25529)  View

Related JVN