Vulnerabilities

TI-2006-04916 CVE-2006-5100 · GHSA-66v4-rxgw-rpfj

PHP remote file inclusion vulnerability in parse/parser.php in WEB//NEWS (aka webnews)…

LOW 39

PHP remote file inclusion vulnerability in parse/parser.php in WEB//NEWS (aka webnews) 1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the WN_BASEDIR parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03836 Published 2006-10-02 No fix listed

TI-2002-00279 CVE-2002-0290 · GHSA-6cxp-xf9p-m43x

Buffer overflow in Netwin WebNews CGI program 1.1, Webnews.exe, allows remote attackers…

LOW 39

Buffer overflow in Netwin WebNews CGI program 1.1, Webnews.exe, allows remote attackers to execute arbitrary code via a long group argument.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0325 Published 2003-04-02 No fix listed

TI-2002-00299 CVE-2002-0310 · GHSA-p6h7-49cc-wmww

Netwin WebNews 1.1k CGI program includes several default usernames and cleartext…

LOW 36

Netwin WebNews 1.1k CGI program includes several default usernames and cleartext passwords that cannot be deleted by the administrator, which allows remote attackers to gain privileges via the username/password combinati…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01571 Published 2002-05-03 No fix listed

Vulnerabilities

Filters

PHP remote file inclusion vulnerability in parse/parser.php in WEB//NEWS (aka webnews)…

Buffer overflow in Netwin WebNews CGI program 1.1, Webnews.exe, allows remote attackers…

Netwin WebNews 1.1k CGI program includes several default usernames and cleartext…