DavidJClark/phpVMS-PopUpNews

DavidJClark/phpVMS-PopUpNews

Releases1
Frequency
Last Release
Stars2
phpVMS Module To Display Quick News List On Pages

CVE History

CVEPublishedCVSS v3CVSS v2
7.5 HIGH

SQL injection vulnerability in popupnewsitem/ in the Pop Up News module 2.0 and possibly earlier for phpVMS allows remote attackers to execute arbitrary SQL commands via the itemid parameter. NOTE: this was originally reported as a problem in phpVMS.