⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2014-10032

MEDIUM · 6.5 CVSS Gepubliceerd: 13-01-2015 CWE-89

Beschrijving

SQL injection vulnerability in news_popup.php in Taboada MacroNews 1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter.

Vendors

Scriptbrasil

Affected products

Taboada Macronews

References

osvdb.org
www.exploit-db.com
exchange.xforce.ibmcloud.com