VULNERABILITY INTELLIGENCE
CVE-2006-1641
CVSS score5.1 MEDIUM
EPSS probability2.37%
CISA KEVNot currently listed
Published2006-04-06
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:P/I:P/A:P
Description
Multiple SQL injection vulnerabilities in CzarNews 1.14 allow remote attackers to execute arbitrary SQL commands via the (1) usern or (2) passw parameters to (a) cn_auth.php, (3) s parameter to (b) news.php, or (4) a parameter to (c) dpost.php.