Vulnerabilities

TI-2007-01109 CVE-2007-1142 · GHSA-8m6g-m8hh-52wp

Cross-site scripting (XSS) vulnerability in Magic News Plus 1.0.2 allows remote attackers…

LOW 23

Cross-site scripting (XSS) vulnerability in Magic News Plus 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the link_parameters parameter in (1) news.php and (2) n_layouts.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01602 Published 2007-02-27 No fix listed CWE-79

TI-2007-01108 CVE-2007-1141 · GHSA-p7rc-h4j2-q995

PHP remote file inclusion vulnerability in preview.php in Magic News Plus 1.0.2 allows…

MEDIUM 42

PHP remote file inclusion vulnerability in preview.php in Magic News Plus 1.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the php_script_path parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05795 Published 2007-02-27 No fix listed CWE-94

TI-2006-00150 CVE-2006-0157 · GHSA-wq5c-pwf7-5526

settings.php in Reamday Enterprises Magic News Plus 1.0.3 allows remote attackers to…

LOW 27

settings.php in Reamday Enterprises Magic News Plus 1.0.3 allows remote attackers to change the administrator password via a change action that specifies identical values for the passwd and admin_password parameters, the…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02279 Published 2006-01-10 No fix listed

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in Magic News Plus 1.0.2 allows remote attackers…

PHP remote file inclusion vulnerability in preview.php in Magic News Plus 1.0.2 allows…

settings.php in Reamday Enterprises Magic News Plus 1.0.3 allows remote attackers to…