Multiple SQL injection vulnerabilities in Web4Future News Portal allow remote attackers to execute arbitrary SQL commands via the ID parameter to (1) comentarii.php or (2) view.php.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| News_portal | Web4future | * | * |
References
- http://secunia.com/advisories/17880
- http://securitytracker.com/id?1016027
- http://www.osvdb.org/25285
- http://www.osvdb.org/25286
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26260
- http://secunia.com/advisories/17880
- http://securitytracker.com/id?1016027
- http://www.osvdb.org/25285
- http://www.osvdb.org/25286
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26260