SQL injection vulnerability in index.php in Powie pNews 2.08 and 2.10, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the shownews parameter.
Max CVSS
7.5
EPSS Score
0.11%
Published
2008-06-12
Updated
2017-09-29
SQL injection vulnerability in newskom.php in Powie pNews 2.03 allows remote attackers to execute arbitrary SQL commands via the newsid parameter.
Max CVSS
7.5
EPSS Score
0.10%
Published
2008-09-30
Updated
2017-09-29
2 vulnerabilities found