Vulnerabilities > CVE-2006-3346 - SQL Injection vulnerability in Carlos Sanchez Valle Mynewsgroups 0.6

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
carlos-sanchez-valle

Summary

SQL injection vulnerability in tree.php in MyNewsGroups 0.6 allows remote attackers to execute arbitrary SQL commands via the grp_id parameter.

Vulnerable Configurations

Part Description Count
Application
Carlos_Sanchez_Valle
1