Total vulnerabilities in the database
SQL injection vulnerability in the News module in Envolution allows remote attackers to execute arbitrary SQL commands via the (1) startrow and (2) catid parameter.
CVSS v2:
CWEs:
OWASP TOP 10: