Vulnerabilities > CVE-2005-3201
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN exploit available
Summary
SQL injection vulnerability in news.php for Utopia News Pro (UNP) 1.1.3, when magic_quotes_gpc is disabled and register_globals is enabled, allows remote attackers to execute arbitrary SQL via the newsid parameter.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 3 |
Exploit-Db
| description | Utopia News Pro <= 1.1.3 (news.php) SQL Injection Exploit. CVE-2005-3201. Webapps exploit for php platform |
| id | EDB-ID:1240 |
| last seen | 2016-01-31 |
| modified | 2005-10-06 |
| published | 2005-10-06 |
| reporter | rgod |
| source | https://www.exploit-db.com/download/1240/ |
| title | Utopia News Pro <= 1.1.3 news.php SQL Injection Exploit |
References
- http://marc.info/?l=bugtraq&m=112872691119874&w=2
- http://marc.info/?l=bugtraq&m=112872691119874&w=2
- http://rgod.altervista.org/utopia113.html
- http://rgod.altervista.org/utopia113.html
- http://secunia.com/advisories/17115/
- http://secunia.com/advisories/17115/
- http://securitytracker.com/id?1015016
- http://securitytracker.com/id?1015016
- http://www.osvdb.org/19942
- http://www.osvdb.org/19942
- http://www.securityfocus.com/bid/15028
- http://www.securityfocus.com/bid/15028
- http://www.utopiasoftware.net/
- http://www.utopiasoftware.net/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22555
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22555