CVE-2006-5908

Published: Nov 15, 2006Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in the login_user function in yans.func.php in Lucas Rodriguez San Pedro Yet Another News System (YANS) 0.2b allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter.

Affected (1)

Products: Lucas Rodriguez San Pedro: Yet Another News System

Lucas Rodriguez San Pedro

1 product

Yet Another News System

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Lucas Rodriguez San Pedro Yet Another News System	Version 0.2b

References (8)

http://archives.neohapsis.com/archives/bugtraq/2006-11/0121.html

Source: cve@mitre.org

Exploit

http://securityreason.com/securityalert/1866

Source: cve@mitre.org

http://www.securityfocus.com/bid/20963

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/30119

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2006-11/0121.html

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://securityreason.com/securityalert/1866

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/20963

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/30119

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.