Phpnews

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Phpnews records in CISA KEV

No Phpnews vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Phpnews 7 records LOW

Records

7 records in Phpnews · all components

TI-2006-06823 CVE-2006-7081 · GHSA-r27g-px4p-8wg5

Multiple PHP remote file inclusion vulnerabilities in PhpNews 1.0 allow remote attackers…

LOW 38

Multiple PHP remote file inclusion vulnerabilities in PhpNews 1.0 allow remote attackers to execute arbitrary PHP code via the Include parameter to (1) Include/lib.inc.php3 and (2) Include/variables.php3.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02679 Published 2007-02-27 No fix listed

TI-2005-02255 CVE-2005-2383 · GHSA-7hqm-4hgx-whmh

SQL injection vulnerability in auth.php in PHPNews 1.2.5 allows remote attackers to…

LOW 35

SQL injection vulnerability in auth.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via the user parameter in an HTTP POST request.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01171 Published 2005-07-26 No fix listed

TI-2005-02037 CVE-2005-2156 · GHSA-p6q5-pm5g-4fw5

SQL injection vulnerability in news.php in PHPNews 1.2.5 allows remote attackers to…

LOW 35

SQL injection vulnerability in news.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via the prevnext parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01141 Published 2005-07-06 No fix listed

TI-2004-02344 CVE-2004-2474 · GHSA-mm9m-2cp6-pv7p

SQL injection vulnerability in PHPNews 1.2.3 allows remote attackers to execute arbitrary…

LOW 35

SQL injection vulnerability in PHPNews 1.2.3 allows remote attackers to execute arbitrary SQL commands via the mid parameter to sendtofriend.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01211 Published 2005-08-20 No fix listed

TI-2006-06105 CVE-2006-6356 · GHSA-g4cp-jcg9-qf3p

Multiple cross-site scripting (XSS) vulnerabilities in templates/link_temp.php in PHPNews…

LOW 34

Multiple cross-site scripting (XSS) vulnerabilities in templates/link_temp.php in PHPNews 1.3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) url, (2) id, (3) subject, (4) username, or (5) tim…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0199 Published 2006-12-07 No fix listed

TI-2006-06106 CVE-2006-6357 · GHSA-x2q8-xjxr-mq83

Cross-site scripting (XSS) vulnerability in templates/cat_temp.php in PHPNews 1.3.0 and…

LOW 32

Cross-site scripting (XSS) vulnerability in templates/cat_temp.php in PHPNews 1.3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01143 Published 2006-12-07 No fix listed

TI-2005-00582 CVE-2005-0632 · GHSA-pjpq-3pxj-qvhp

PHP remote file inclusion vulnerability in auth.php in PHPNews 1.2.4 and possibly 1.2.3…

LOW 28

PHP remote file inclusion vulnerability in auth.php in PHPNews 1.2.4 and possibly 1.2.3, allows remote attackers to execute arbitrary PHP code via the path parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02623 Published 2005-03-04 No fix listed

Open these records in search →

Critical	0
High	4
Medium	3
Low	0
No CVSS	0