CVE-2006-5908 | BDVDB-2026-20317 Detail

Description#

Multiple SQL injection vulnerabilities in the login_user function in yans.func.php in Lucas Rodriguez San Pedro Yet Another News System (YANS) 0.2b allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/30119
http://securityreason.com/securityalert/1866
http://archives.neohapsis.com/archives/bugtraq/2006-11/0121.html
http://www.securityfocus.com/bid/20963

Exploit#

No public exploit known

History#

Version 12006-11-15Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.