Multiple SQL injection vulnerabilities in Web4Future News Portal allow remote attackers to execute arbitrary SQL commands via the ID parameter to (1) comentarii.php or (2) view.php.
Name | Vendor | Start Version | End Version |
---|---|---|---|
News_portal | Web4future | * | * |