CVE-2005-3846

SQL injection vulnerability in news.php in Fantastic News 2.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter.

Date published : 2005-11-26

http://www.securityfocus.com/bid/15622

http://pridels0.blogspot.com/2005/11/fantastic-news-category-sql-inj.html