CVE-2006-1641

no score yetEPSS 2.4%

Multiple SQL injection vulnerabilities in CzarNews 1.14 allow remote attackers to execute arbitrary SQL commands via the (1) usern or (2) passw parameters to (a) cn_auth.php, (3) s parameter to (b) news.php, or (4) a parameter to (c) dpost.php.

EPSS: 2.4% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
Published: 2006-04-06
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

czaries_network:czarnews

References

http://evuln.com/vulns/118/summary.html
http://secunia.com/advisories/19541
http://securitytracker.com/id?1015957
http://www.osvdb.org/24382
http://www.osvdb.org/24383

Check your stack JSON