CVE-2005-3201 SQL injection vulnerability in news.php for Utopia News Pro (UNP) 1.1.3, when magic_quotes_gpc is disabled and register_globals is enabled, allows remote attackers to execute arbitrary SQL via the new...
HighCVSS 7.5
EPSS 1.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in news.php for Utopia News Pro (UNP) 1.1.3, when magic_quotes_gpc is disabled and register_globals is enabled, allows remote attackers to execute arbitrary SQL via the newsid parameter.
Affected products
No affected product data has been published yet.
References
- 20051007 Utopia News Pro 1.1.3 SQL Injection / cross site scripting mailing-list
- rgod.altervista.org
- 17115 patch third-party-advisory vendor-advisory
- 1015016 vdb-entry
- 19942 vdb-entry
- 15028 exploit vdb-entry
- www.utopiasoftware.net
- utopianewspro-news-sql-injection(22555) vdb-entry