← All advisories

Unrated severityNVD Advisory· Published Dec 31, 2004· Updated Jun 16, 2026

CVE-2004-2474

CVE-2004-2474

Description

SQL injection vulnerability in PHPNews 1.2.3 allows remote attackers to execute arbitrary SQL commands via the mid parameter to sendtofriend.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Phpnews/Phpnews
cpe:2.3:a:phpnews:phpnews:1.2.3:*:*:*:*:*:*:*
Newsphp/PHPNewsllm-fuzzy
Range: =1.2.3

Patches

Vulnerability mechanics

References

5

secunia.com/advisories/13300nvdPatchVendor Advisory
www.securityfocus.com/bid/11748nvdPatch
newsphp.sourceforge.net/changelog/changelog_1.24.txtnvd
www.osvdb.org/12119nvd
exchange.xforce.ibmcloud.com/vulnerabilities/18233nvd

News mentions

0

No linked articles in our index yet.