Ashwebstudio

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Ashwebstudio records in CISA KEV

No Ashwebstudio vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ashnews 2 records LOW

Records

2 records

TI-2003-01192 CVE-2003-1292 · GHSA-qprv-w86x-qw2w

PHP remote file include vulnerability in Derek Ashauer ashNews 0.83 allows remote…

LOW 29

PHP remote file include vulnerability in Derek Ashauer ashNews 0.83 allows remote attackers to include and execute arbitrary remote files via a URL in the pathtoashnews parameter to (1) ashnews.php and (2) ashheadlines.p…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03408 Published 2006-02-02 No fix listed

TI-2006-00509 CVE-2006-0524 · GHSA-m94m-h74m-rxhj

Cross-site scripting (XSS) vulnerability in ashnews.php in Derek Ashauer ashNews 0.83…

LOW 27

Cross-site scripting (XSS) vulnerability in ashnews.php in Derek Ashauer ashNews 0.83 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04005 Published 2006-02-02 No fix listed

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0