Vulnerabilities > CVE-2005-3201 - SQL Injection vulnerability in Utopia News Pro
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
SQL injection vulnerability in news.php for Utopia News Pro (UNP) 1.1.3, when magic_quotes_gpc is disabled and register_globals is enabled, allows remote attackers to execute arbitrary SQL via the newsid parameter.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 3 |
Exploit-Db
description | Utopia News Pro <= 1.1.3 (news.php) SQL Injection Exploit. CVE-2005-3201. Webapps exploit for php platform |
id | EDB-ID:1240 |
last seen | 2016-01-31 |
modified | 2005-10-06 |
published | 2005-10-06 |
reporter | rgod |
source | https://www.exploit-db.com/download/1240/ |
title | Utopia News Pro <= 1.1.3 news.php SQL Injection Exploit |
References
- http://marc.info/?l=bugtraq&m=112872691119874&w=2
- http://rgod.altervista.org/utopia113.html
- http://secunia.com/advisories/17115/
- http://securitytracker.com/id?1015016
- http://www.osvdb.org/19942
- http://www.securityfocus.com/bid/15028
- http://www.utopiasoftware.net/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22555