CVE-2006-1560

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-03-31 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in SkinTech phpNewsManager 1.48 allow remote attackers to execute arbitrary SQL commands via unspecified parameters, possibly (1) id and (2) topicid, in (a) browse.php, (b) category.php, (c) gallery.php, (d) poll.php, and (e) possibly other unspecified scripts. NOTE: portions of the description details are obtained from third party information.

Affected products

Skintech Phpnewsmanager: 1.48

References

http://evuln.com/vulns/110
http://secunia.com/advisories/19391
http://securityreason.com/securityalert/680
http://www.osvdb.org/24265
http://www.osvdb.org/24266
http://www.osvdb.org/24267
http://www.osvdb.org/24268
http://www.securityfocus.com/archive/1/430311/100/0/threaded
http://www.securityfocus.com/archive/1/430478/100/0/threaded
http://www.securityfocus.com/bid/17301
http://www.vupen.com/english/advisories/2006/1152
https://exchange.xforce.ibmcloud.com/vulnerabilities/25512

Get alerted when CVE-2006-1560 or the next vulnerability affects your stack