SQL injection vulnerability in Pre News Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) index.php, and the (2) nid parameter to (b) news_detail.php, (c) email_story.php, (d) thankyou.php, (e) printable_view.php, (f) tella_friend.php, and (g) send_comments.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. It is possible that this is primary to CVE-2006-2678.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/34035 | vdb-entry x_refsource_XF x_transferred |
| http://www.osvdb.org/26077 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/26079 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/26074 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.vupen.com/english/advisories/2006/1990 | vdb-entry x_refsource_VUPEN x_transferred |
| http://secunia.com/advisories/20284 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://www.securityfocus.com/archive/1/497185/100/0/threaded | mailing-list x_refsource_BUGTRAQ x_transferred |
| http://www.securityfocus.com/archive/1/493369/100/0/threaded | mailing-list x_refsource_BUGTRAQ x_transferred |
| https://www.exploit-db.com/exploits/5803 | exploit x_refsource_EXPLOIT-DB x_transferred |
| http://www.osvdb.org/26078 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/26073 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/26076 | vdb-entry x_refsource_OSVDB x_transferred |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/43070 | vdb-entry x_refsource_XF x_transferred |
| http://www.osvdb.org/26075 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.securityfocus.com/archive/1/497219/100/0/threaded | mailing-list x_refsource_BUGTRAQ x_transferred |