CVE-2006-1817

CVE-2006-1817 · LOW Severity

AV:N/AC:H/AU:N/C:N/I:P/A:N

SQL injection vulnerability in authcheck.php in warforge.NEWS 1.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the (1) authusername and possibly the (2) authpassword cookie.

Learn more about our User Device Pen Test.