Vulnerabilities

TI-2008-00689 CVE-2008-0723 · GHSA-pxvv-6vfr-38vx

Cross-site scripting (XSS) vulnerability in mynews.inc.php in MyNews 1.6.4, and other…

LOW 23

Cross-site scripting (XSS) vulnerability in mynews.inc.php in MyNews 1.6.4, and other earlier 1.6.x versions, allows remote attackers to inject arbitrary web script or HTML via the hash parameter in an admin action to in…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01436 Published 2008-02-12 No fix listed CWE-79

TI-2006-02150 CVE-2006-2208 · GHSA-v97x-h9vh-grc5

Multiple cross-site scripting (XSS) vulnerabilities in mynews.inc.php in MyNews 1.6.2…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in mynews.inc.php in MyNews 1.6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) hash and (2) page parameters.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01911 Published 2006-05-05 No fix listed

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in mynews.inc.php in MyNews 1.6.4, and other…

Multiple cross-site scripting (XSS) vulnerabilities in mynews.inc.php in MyNews 1.6.2…