WEB//NEWS “catid” SQL Injection Vulnerability

David Vieira-Kurz has discovered a vulnerability in WEB//NEWS, which can be exploited by malicious people to conduct SQL injection attacks.