P-news

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

P-news records in CISA KEV

No P-news vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

P-news 2 records LOW

Records

2 records

TI-2006-05246 CVE-2006-5434 · GHSA-r6qg-fhrj-6jmf

PHP remote file inclusion vulnerability in p-news.php in P-News 1.16 and 1.17 allows…

LOW 38

PHP remote file inclusion vulnerability in p-news.php in P-News 1.16 and 1.17 allows remote attackers to execute arbitrary PHP code via a URL in the pn_lang parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02635 Published 2006-10-20 No fix listed

TI-2006-06631 CVE-2006-6888 · GHSA-vh2g-rpmx-8c64

P-News 1.16 and 1.17 store sensitive information under the web root with insufficient…

LOW 27

P-News 1.16 and 1.17 store sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the administrative account name and password hash via a direct request for db/…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02433 Published 2007-01-05 No fix listed

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0