Vulnerabilities

TI-2008-01583 CVE-2008-1651 · GHSA-cq2h-f697-9p5m

Directory traversal vulnerability in admin/login.php in EasyNews 4.0 allows remote…

LOW 38

Directory traversal vulnerability in admin/login.php in EasyNews 4.0 allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0312 Published 2008-04-02 No fix listed CWE-22

TI-2008-01582 CVE-2008-1650 · GHSA-7g4p-8hcf-w729

SQL injection vulnerability in dynamicpages/index.php in EasyNews 4.0 allows remote…

LOW 36

SQL injection vulnerability in dynamicpages/index.php in EasyNews 4.0 allows remote attackers to execute arbitrary SQL commands via the read parameter in an edp_Help_Internal_News action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01313 Published 2008-04-02 No fix listed CWE-89

TI-2008-01581 CVE-2008-1649 · GHSA-5gp8-cj7x-g2vr

Cross-site scripting (XSS) vulnerability in staticpages/easypublish/index.php in EasyNews…

LOW 24

Cross-site scripting (XSS) vulnerability in staticpages/easypublish/index.php in EasyNews 4.0 allows remote attackers to inject arbitrary web script or HTML via the read parameter in an edp_pupublish action.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01901 Published 2008-04-02 No fix listed CWE-79

Vulnerabilities

Filters

Directory traversal vulnerability in admin/login.php in EasyNews 4.0 allows remote…

SQL injection vulnerability in dynamicpages/index.php in EasyNews 4.0 allows remote…

Cross-site scripting (XSS) vulnerability in staticpages/easypublish/index.php in EasyNews…