VYPR

Dmanews

by Dmanews

CVEs (1)

  • CVE-2005-3956Dec 1, 2005
    risk 0.03cvss epss 0.00

    Multiple SQL injection vulnerabilities in index.php in DMANews 0.904 and 0.910 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in a comments action and the (2) sortorder and (3) display_num parameters in a news_list action.