| Package | Affected versions | Patched versions |
|---|---|---|
| webspell | = 4.01.02 |
SQL injection vulnerability in news.php in webSPELL 4.01.02, when register_globals is enabled, allows remote attackers to execute arbitrary SQL commands via the showonly parameter to index.php, a different vector than CVE-2006-5388.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free