Vulnerabilities > Xfairguy > Codeavalanche News > 1.x
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2007-02-21 | CVE-2007-1021 | SQL Injection vulnerability in Xfairguy Codeavalanche News 1.X SQL injection vulnerability in inc_listnews.asp in CodeAvalanche News 1.x allows remote attackers to execute arbitrary SQL commands via the CAT_ID parameter. | 10.0 |