Powie

Records15All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high10CVSS 7.0–8.9

Exploited now

Powie records in CISA KEV

No Powie vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pforum 5 records MEDIUM Pfile 2 records LOW Pnews 2 records LOW Psys 2 records LOW Pgb 1 record LOW Php Matchmaker 1 record LOW Plink 1 record LOW

Records

2 records in Pnews · all components

TI-2008-04146 CVE-2008-4347 · GHSA-pgh5-x6gv-9p7r

SQL injection vulnerability in newskom.php in Powie pNews 2.03 allows remote attackers to…

LOW 35

SQL injection vulnerability in newskom.php in Powie pNews 2.03 allows remote attackers to execute arbitrary SQL commands via the newsid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00999 Published 2008-09-30 No fix listed CWE-89

TI-2008-02555 CVE-2008-2673 · GHSA-gq6p-fh2m-44wj

SQL injection vulnerability in index.php in Powie pNews 2.08 and 2.10, when…

LOW 35

SQL injection vulnerability in index.php in Powie pNews 2.08 and 2.10, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the shownews parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0101 Published 2008-06-12 No fix listed CWE-89

Open these records in search →

Critical	1
High	10
Medium	4
Low	0
No CVSS	0