CVE-2005-3853: Solucija Snews

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in snews.php in sNews 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) category parameters to index.php.

Affected products

• Solucija Snews: up to and including 1.3; version 1.2 only

Published 2005-11-27. Last modified 2026-06-16.