CVE-2005-3469

News2net - SQL Injection

Title source: rule
STIX 2.1

Description

SQL injection vulnerability in index.php in News2Net 3.0.0.0 allows remote attackers to execute arbitrary SQL commands via the category parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Mousehack · textwebappsphp
https://www.exploit-db.com/exploits/26458

References (5)

Core 5
Core References
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2005/2273
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/15274
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/20450
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/22947
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17396

Scores

EPSS 0.0045
EPSS Percentile 63.6%

Details

Status published
Products (1)
news2net/news2net 3.0.0.0
Published Nov 02, 2005
Tracked Since Feb 18, 2026