Secunia

Yichen Xie and Alex Aiken have discovered some vulnerabilities in Utopia News Pro, which can be exploited by malicious users to conduct SQL injection attacks.

Some input isn't properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

Example:
* The "newsid" parameter in "editnews.php".

The vulnerabilities have been confirmed in version 1.1.4. Prior versions may also be affected.

Solution
Update to version 1.1.5.
Further details available in Customer Area

Provided and/or discovered by
Yichen Xie and Alex Aiken, Stanford University

Deep Links
Links available in Customer Area