
DavidJClark/phpVMS-PopUpNews
Releases1
Frequency
Last Release
Stars2
phpVMS Module To Display Quick News List On Pages
CVE History
| CVE | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|
| — | 7.5 HIGH | ||
SQL injection vulnerability in popupnewsitem/ in the Pop Up News module 2.0 and possibly earlier for phpVMS allows remote attackers to execute arbitrary SQL commands via the itemid parameter. NOTE: this was originally reported as a problem in phpVMS. | |||