SQL Injection Vulnerability in SimplePHPscripts News Script PHP Pro 2.3 via id Parameter in editNews Action

SQL Injection Vulnerability in SimplePHPscripts News Script PHP Pro 2.3 via id Parameter in editNews Action

CVE-2020-25475 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SimplePHPscripts News Script PHP Pro 2.3 is affected by a SQL Injection via the id parameter in an editNews action.

Learn more about our Cis Benchmark Audit For Microsoft Sql Server.