CVE-2006-2139

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-05-02 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in PHP Newsfeed 20040723 allow remote attackers to execute arbitrary SQL commands via the (1) name parameter to (a) deltables.php, (2) select, (3) header, (4) url, (5) source, or (6) time parameters to (b) manualsubmit.php, (7) num parameter to (c) delete.php, or (8) tablename parameter to (d) searchnews.php.

Affected products

Wilsonncareabusinesses Php Newsfeed: 2004-07-23

References

http://evuln.com/vulns/129/summary.html
http://secunia.com/advisories/19904
http://www.osvdb.org/25132
http://www.osvdb.org/25133
http://www.osvdb.org/25134
http://www.osvdb.org/25135
http://www.securityfocus.com/bid/17757
http://www.vupen.com/english/advisories/2006/1574
https://exchange.xforce.ibmcloud.com/vulnerabilities/26205
http://evuln.com/vulns/129/summary.html
http://secunia.com/advisories/19904
http://www.osvdb.org/25132

Get alerted when CVE-2006-2139 or the next vulnerability affects your stack