CVE-2006-0972 - SQL injection vulnerability in news.php in Tony Baird Fantastic News 2.1.1 allows remote attackers to execute arbitrary SQL commands via the page parameter

Back Back to CVE browser

MEDIUM

SQL injection vulnerability in news.php in Tony Baird Fantastic News 2.1.1 allows remote attackers to execute arbitrary SQL commands via the page parameter

Published Mar 3, 2006

5.0

MEDIUM

CVSS 2.0

EPSS 1.34%

Description

SQL injection vulnerability in news.php in Tony Baird Fantastic News 2.1.1 allows remote attackers to execute arbitrary SQL commands via the page parameter. NOTE: the category vector is already covered by CVE-2005-3846.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

http://securityreason.com/securityalert/501
third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/426195/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/16842
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/24943
vdb-entryx_refsource_XF

Link	Providers	Tags
http://securityreason.com/securityalert/501		third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/426195/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/16842		vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/24943		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 3, 2006

Updated Aug 7, 2024

Reserved Mar 3, 2006

Link CVE-2006-0972

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-0972

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-0972