Unrated severityNVD Advisory· Published May 10, 2013· Updated Jun 16, 2026
CVE-2013-3524
CVE-2013-3524
Description
SQL injection vulnerability in popupnewsitem/ in the Pop Up News module 2.0 and possibly earlier for phpVMS allows remote attackers to execute arbitrary SQL commands via the itemid parameter. NOTE: this was originally reported as a problem in phpVMS.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:simpilotgroup:pop_up_news:2.0:*:*:*:*:*:*:*
- Range: <=2.0
Patches
Vulnerability mechanics
References
7- www.securityfocus.com/bid/59057nvdExploit
- secunia.com/advisories/53033nvdVendor Advisory
- www.exploit-db.com/exploits/24960nvd
- www.osvdb.org/92328nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/83423nvd
- github.com/DavidJClark/phpVMS-PopUpNews/commit/5cadf9cbf4d0872a879666ea594be356fad5897envd
- github.com/DavidJClark/phpVMS-PopUpNews/commit/efaffa04ef87db1722d69ac7bfc07be71ce2dccfnvd
News mentions
0No linked articles in our index yet.