VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 15, 2006· Updated Jun 16, 2026

CVE-2006-5908

CVE-2006-5908

Description

Multiple SQL injection vulnerabilities in the login_user function in yans.func.php in Lucas Rodriguez San Pedro Yet Another News System (YANS) 0.2b allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter.

Affected products

2
  • Lucas Rodriguez San Pedro/Yet Another News System2 versions
    cpe:2.3:a:lucas_rodriguez_san_pedro:yet_another_news_system:0.2b:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:lucas_rodriguez_san_pedro:yet_another_news_system:0.2b:*:*:*:*:*:*:*
    • (no CPE)range: =0.2b

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.