NetWin

Records51All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high12CVSS 7.0–8.9

Exploited now

NetWin records in CISA KEV

No NetWin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Surgemail 17 records MEDIUM Surgeftp 13 records MEDIUM Dmail 6 records MEDIUM Cwmail 5 records LOW Dmailweb 4 records LOW Webmail 4 records MEDIUM Webnews 3 records LOW Surgeldap 2 records MEDIUM

Records

3 records in Webnews · all components

TI-2006-04916 CVE-2006-5100 · GHSA-66v4-rxgw-rpfj

PHP remote file inclusion vulnerability in parse/parser.php in WEB//NEWS (aka webnews)…

LOW 39

PHP remote file inclusion vulnerability in parse/parser.php in WEB//NEWS (aka webnews) 1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the WN_BASEDIR parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03836 Published 2006-10-02 No fix listed

TI-2002-00279 CVE-2002-0290 · GHSA-6cxp-xf9p-m43x

Buffer overflow in Netwin WebNews CGI program 1.1, Webnews.exe, allows remote attackers…

LOW 39

Buffer overflow in Netwin WebNews CGI program 1.1, Webnews.exe, allows remote attackers to execute arbitrary code via a long group argument.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0325 Published 2003-04-02 No fix listed

TI-2002-00299 CVE-2002-0310 · GHSA-p6h7-49cc-wmww

Netwin WebNews 1.1k CGI program includes several default usernames and cleartext…

LOW 36

Netwin WebNews 1.1k CGI program includes several default usernames and cleartext passwords that cannot be deleted by the administrator, which allows remote attackers to gain privileges via the username/password combinati…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01571 Published 2002-05-03 No fix listed

Open these records in search →

Critical	7
High	12
Medium	31
Low	1
No CVSS	0