CVE coverage
View on NVD →
CVE-2007-0865
CVSS 7.5
2 detections found
SQL injection vulnerability in comments.php in LushiNews 1.01 and earlier allows remote authenticated users to inject arbitrary SQL commands via the id parameter.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| suricata | ET WEB_SPECIFIC_APPS LushiNews SQL Injection Attempt -- comments.php id UNION SELECT | rev 10 | 2020-09-11 |
| snort | ET WEB_SPECIFIC_APPS LushiNews SQL Injection Attempt -- comments.php id UNION SELECT | rev 7 | 2010-12-17 |