← Database

CVE-2005-2637

HIGH CVSS: 7.5 Published: 2005-08-23 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in PHPFreeNews 1.40 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) Match or (2) CatID parameter to SearchResults.php, or (3) the password to AccessControl.php.

Affected Platforms

Phpfreenews Phpfreenews

Weakness Type

NVD-CWE-Other

References