← Database

CVE-2005-3846

HIGH CVSS: 7.5 Published: 2005-11-26 Modified: 2026-06-16

Description

SQL injection vulnerability in news.php in Fantastic News 2.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter.

Affected Platforms

Fscripts Fantastic News

Weakness Type

NVD-CWE-Other

References