Unrated severityNVD Advisory· Published Apr 4, 2006· Updated Jun 16, 2026

CVE-2006-1613

Description

Multiple SQL injection vulnerabilities in aWebNews 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) user123 variable in (a) login.php or (b) fpass.php; or (2) cid parameter to (c) visview.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Aweb Labs/Awebnews2 versions
cpe:2.3:a:aweb_labs:awebnews:1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:aweb_labs:awebnews:1.0:*:*:*:*:*:*:*
- (no CPE)range: = 1.0

Patches

Vulnerability mechanics

References

secunia.com/advisories/19487nvdVendor Advisory
evuln.com/vulns/116/summary.htmlnvd
www.osvdb.org/24334nvd
www.osvdb.org/24335nvd
www.osvdb.org/24336nvd
www.securityfocus.com/archive/1/431007/100/0/threadednvd
www.vupen.com/english/advisories/2006/1196nvd
exchange.xforce.ibmcloud.com/vulnerabilities/25590nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000