Vulnerabilities

TI-2010-02720 CVE-2010-2844 · GHSA-w4hc-vqpp-rj57

Cross-site scripting (XSS) vulnerability in news_show.php in Newanz NewsOffice 2.0.18…

LOW 23

Cross-site scripting (XSS) vulnerability in news_show.php in Newanz NewsOffice 2.0.18 allows remote attackers to inject arbitrary web script or HTML via the n-cat parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01499 Published 2010-07-23 No fix listed CWE-79

TI-2008-01827 CVE-2008-1903 · GHSA-2fw3-wc2h-wv2q

PHP remote file inclusion vulnerability in news_show.php in Newanz NewsOffice 1.0 and…

MEDIUM 60

PHP remote file inclusion vulnerability in news_show.php in Newanz NewsOffice 1.0 and 1.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the newsoffice_directory par…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.39211 Published 2008-04-21 No fix listed CWE-94

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in news_show.php in Newanz NewsOffice 2.0.18…

PHP remote file inclusion vulnerability in news_show.php in Newanz NewsOffice 1.0 and…