← Database

CVE-2005-4263

HIGH CVSS: 7.5 Published: 2005-12-15 Modified: 2026-06-16

Description

SQL injection vulnerability in the News module in Envolution allows remote attackers to execute arbitrary SQL commands via the (1) startrow and (2) catid parameter.

Affected Platforms

Envolution Envolution

Weakness Type

CWE-89

References