CVE-2005-3853

Published: Nov 27, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in snews.php in sNews 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) category parameters to index.php.

Affected (2)

Products: Solucija: Snews

Solucija

1 product

Snews

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Solucija Snews	Up to 1.3
Solucija Snews	Version 1.2

References (8)

http://pridels0.blogspot.com/2005/11/snews-13-sql-injection.html

Source: cve@mitre.org

http://secunia.com/advisories/17688

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/21093

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/2585

Source: cve@mitre.org

http://pridels0.blogspot.com/2005/11/snews-13-sql-injection.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17688

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.osvdb.org/21093

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2005/2585

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.