Vulnerabilities

TI-2009-00672 CVE-2009-0705 · GHSA-8cmf-vm53-gmwg

SQL injection vulnerability in news.php in PowerScripts PowerNews 2.5.4, when…

LOW 32

SQL injection vulnerability in news.php in PowerScripts PowerNews 2.5.4, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the newsid parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00962 Published 2009-02-23 No fix listed CWE-89

TI-2008-00708 CVE-2008-0742 · GHSA-rwf6-mxf8-5hcf

Multiple directory traversal vulnerabilities in PowerScripts PowerNews 2.5.6 allow remote…

LOW 37

Multiple directory traversal vulnerabilities in PowerScripts PowerNews 2.5.6 allow remote attackers to read and include arbitrary files via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02286 Published 2008-02-13 No fix listed CWE-22

Vulnerabilities

Filters

SQL injection vulnerability in news.php in PowerScripts PowerNews 2.5.4, when…

Multiple directory traversal vulnerabilities in PowerScripts PowerNews 2.5.6 allow remote…