← Database

CVE-2006-1543

HIGH CVSS: 7.5 Published: 2006-03-30 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) loginvar parameter in (a) admin/admin.php, and the (2) news and (3) nom parameters in (b) news.php.

Affected Platforms

Vscripts Vnews

Weakness Type

NVD-CWE-Other

References