Vulnerabilities

TI-2007-00989 CVE-2007-1021 · GHSA-7g52-xfm9-8p6h

SQL injection vulnerability in inc_listnews.asp in CodeAvalanche News 1.x allows remote…

MEDIUM 46

SQL injection vulnerability in inc_listnews.asp in CodeAvalanche News 1.x allows remote attackers to execute arbitrary SQL commands via the CAT_ID parameter.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01658 Published 2007-02-21 No fix listed

TI-2006-02431 CVE-2006-2500 · GHSA-849p-j3j9-wq54

Cross-site scripting (XSS) vulnerability in add_news.asp in CodeAvalanche News (CANews)…

LOW 33

Cross-site scripting (XSS) vulnerability in add_news.asp in CodeAvalanche News (CANews) 1.2 allows remote attackers to inject arbitrary web script or HTML via the Headline field.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01675 Published 2006-05-20 No fix listed

TI-2006-02430 CVE-2006-2499 · GHSA-54vr-jrrm-8j5c

SQL injection vulnerability in default.asp in CodeAvalanche News (CANews) 1.2 allows…

LOW 36

SQL injection vulnerability in default.asp in CodeAvalanche News (CANews) 1.2 allows remote attackers to execute arbitrary SQL commands via the password field.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01321 Published 2006-05-20 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in inc_listnews.asp in CodeAvalanche News 1.x allows remote…

Cross-site scripting (XSS) vulnerability in add_news.asp in CodeAvalanche News (CANews)…

SQL injection vulnerability in default.asp in CodeAvalanche News (CANews) 1.2 allows…