CVE-2006-2763

SQL injection vulnerability in Pre News Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) index.php, and the (2) nid parameter to (b) news_detail.php, (c) email_story.php, (d) thankyou.php, (e) printable_view.php, (f) tella_friend.php, and (g) send_comments.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. It is possible that this is primary to CVE-2006-2678.

• http://secunia.com/advisories/20284Vendor Advisory
• http://www.osvdb.org/26073
• http://www.osvdb.org/26074
• http://www.osvdb.org/26075
• http://www.osvdb.org/26076
• http://www.osvdb.org/26077
• http://www.osvdb.org/26078
• http://www.osvdb.org/26079
• http://www.securityfocus.com/archive/1/493369/100/0/threaded
• http://www.securityfocus.com/archive/1/497185/100/0/threaded
• http://www.securityfocus.com/archive/1/497219/100/0/threaded
• http://www.vupen.com/english/advisories/2006/1990
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34035
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43070
• https://www.exploit-db.com/exploits/5803
• http://secunia.com/advisories/20284Vendor Advisory
• http://www.osvdb.org/26073
• http://www.osvdb.org/26074
• http://www.osvdb.org/26075
• http://www.osvdb.org/26076
• http://www.osvdb.org/26077
• http://www.osvdb.org/26078
• http://www.osvdb.org/26079
• http://www.securityfocus.com/archive/1/493369/100/0/threaded
• http://www.securityfocus.com/archive/1/497185/100/0/threaded
• http://www.securityfocus.com/archive/1/497219/100/0/threaded
• http://www.vupen.com/english/advisories/2006/1990
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34035
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43070
• https://www.exploit-db.com/exploits/5803

Published

Jun 2, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-2757Cross-site scripting (XSS) vulnerability in Chipmunk guestbo…
• CVE-2006-2758Directory traversal vulnerability in jetty 6.0.x (jetty6) be…
• CVE-2006-2759jetty 6.0.x (jetty6) beta16 allows remote attackers to read …
• CVE-2006-2760SQL injection vulnerability in modules.php in 4nNukeWare 4nF…
• CVE-2006-2761SQL injection vulnerability in Hitachi HITSENSER3 HITSENSER3…
• CVE-2006-2762PHP remote file inclusion vulnerability in includes/config.p…
• CVE-2006-2764Cross-site scripting (XSS) vulnerability in GuestbookXL 1.3 …
• CVE-2006-2765Cross-site scripting (XSS) vulnerability in news_information…
• CVE-2006-2766Buffer overflow in INETCOMM.DLL, as used in Microsoft Intern…
• CVE-2006-2767PHP remote file inclusion vulnerability in Ottoman 1.1.2, wh…
• CVE-2006-2768PHP remote file inclusion vulnerability in METAjour 2.1, whe…
• CVE-2006-2769The HTTP Inspect preprocessor (http_inspect) in Snort 2.4.0 …