CVE-2006-1560

Description

Multiple SQL injection vulnerabilities in SkinTech phpNewsManager 1.48 allow remote attackers to execute arbitrary SQL commands via unspecified parameters, possibly (1) id and (2) topicid, in (a) browse.php, (b) category.php, (c) gallery.php, (d) poll.php, and (e) possibly other unspecified scripts. NOTE: portions of the description details are obtained from third party information.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/25512

http://www.vupen.com/english/advisories/2006/1152

http://www.securityfocus.com/bid/17301

http://www.securityfocus.com/archive/1/430478/100/0/threaded

http://www.securityfocus.com/archive/1/430311/100/0/threaded

http://www.osvdb.org/24268

http://www.osvdb.org/24267

http://www.osvdb.org/24266

http://www.osvdb.org/24265

http://securityreason.com/securityalert/680

http://secunia.com/advisories/19391

http://evuln.com/vulns/110

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS