Vulnerabilities > CVE-2006-2139 - SQL Injection vulnerability in Wilsonncareabusinesses PHP Newsfeed 20040723

047910
CVSS 6.4 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
wilsonncareabusinesses
NVD
Published: 2006-05-02
Updated: 2017-07-20

Summary

Multiple SQL injection vulnerabilities in PHP Newsfeed 20040723 allow remote attackers to execute arbitrary SQL commands via the (1) name parameter to (a) deltables.php, (2) select, (3) header, (4) url, (5) source, or (6) time parameters to (b) manualsubmit.php, (7) num parameter to (c) delete.php, or (8) tablename parameter to (d) searchnews.php.

Vulnerable Configurations

Part Description Count
Application
Wilsonncareabusinesses
1

References