Unrated severityNVD Advisory· Published May 2, 2006· Updated Jun 16, 2026
CVE-2006-2139
CVE-2006-2139
Description
Multiple SQL injection vulnerabilities in PHP Newsfeed 20040723 allow remote attackers to execute arbitrary SQL commands via the (1) name parameter to (a) deltables.php, (2) select, (3) header, (4) url, (5) source, or (6) time parameters to (b) manualsubmit.php, (7) num parameter to (c) delete.php, or (8) tablename parameter to (d) searchnews.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
220040723+ 1 more
- (no CPE)range: 20040723
- cpe:2.3:a:wilsonncareabusinesses:php_newsfeed:2004-07-23:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
9- secunia.com/advisories/19904nvdVendor Advisory
- evuln.com/vulns/129/summary.htmlnvd
- www.osvdb.org/25132nvd
- www.osvdb.org/25133nvd
- www.osvdb.org/25134nvd
- www.osvdb.org/25135nvd
- www.securityfocus.com/bid/17757nvd
- www.vupen.com/english/advisories/2006/1574nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/26205nvd
News mentions
0No linked articles in our index yet.