← Database

CVE-2008-1957

HIGH CVSS: 7.5 Published: 2008-04-25 Modified: 2026-06-16

Description

SQL injection vulnerability in news.php in Tr Script News 2.1 allows remote attackers to execute arbitrary SQL commands via the nb parameter in voir mode.

Affected Platforms

Easyscripts Tr Script News

Weakness Type

CWE-89

References