Vulnerabilities

TI-2006-06324 CVE-2006-6580 · GHSA-mjh6-v3q6-4w2g

admin/change.php in ProNews 1.5 does not check whether a user is permitted to change news…

LOW 31

admin/change.php in ProNews 1.5 does not check whether a user is permitted to change news items, which allows remote attackers to add or delete information within an item, and possibly have other impacts.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01174 Published 2006-12-15 No fix listed

TI-2006-06264 CVE-2006-6519 · GHSA-m373-j4rh-vrjp

SQL injection vulnerability in lire-avis.php in ProNews 1.5 allows remote attackers to…

LOW 35

SQL injection vulnerability in lire-avis.php in ProNews 1.5 allows remote attackers to execute arbitrary SQL commands via the aa parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01073 Published 2006-12-14 No fix listed

TI-2006-06263 CVE-2006-6518 · GHSA-pg23-vmcr-c2rg

Multiple cross-site scripting (XSS) vulnerabilities in ProNews 1.5 allow remote attackers…

LOW 34

Multiple cross-site scripting (XSS) vulnerabilities in ProNews 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) pseudo, (2) email, (3) date, (4) sujet, (5) message, (6) site, and (7) lien par…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01881 Published 2006-12-14 No fix listed

Vulnerabilities

Filters

admin/change.php in ProNews 1.5 does not check whether a user is permitted to change news…

SQL injection vulnerability in lire-avis.php in ProNews 1.5 allows remote attackers to…

Multiple cross-site scripting (XSS) vulnerabilities in ProNews 1.5 allow remote attackers…