virus logo Intrusion Prevention

PHP.news.php.NEWSID.Parameter.SQL.Injection

description-logoDescription

This indicates a SQL injection vulnerability in FlexPHPNews 0.0.5. This issue is due to input validation errors in the "news.php" script when processing the "newsid" parameter. It allows remote attackers to execute arbitrary SQL commands.

affected-products-logoAffected Products

FlexPHPNews 0.0.5

Impact logoImpact

SQL Injection.

recomended-action-logoRecommended Actions

Currently we are not aware of any official supplied fix for issue.

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)
ID 14497
Created Apr 30, 2007
Updated Jan 13, 2022
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon
CVE ID CVE-2005-1237
Exploit Prediction Score 7.07%
Default Action pass
Active
Affected OS Windows, Linux, BSD, Solaris, MacOS
Affected App PHP_app