CVE-2006-2239
Newsadmin 1.1 - SQL Injection via readarticle.php nid Parameter
Title source: llmDescription
SQL injection vulnerability in readarticle.php in Newsadmin 1.1 allows remote attackers to execute arbitrary SQL commands via the nid parameter.
References (6)
Core 6
Core References
Various Sources x_refsource_misc
http://evuln.com/vulns/133/summary.html
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2006/1669
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/26247
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/19972
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/25276
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/17854
Scores
EPSS
0.0134
EPSS Percentile
68.4%
Details
CWE
CWE-89
Status
published
Products (1)
tuomas_airaksinen/newsadmin
1.1
Published
May 09, 2006
Tracked Since
Feb 18, 2026