Vulnerabilities

TI-2005-02049 CVE-2005-2168 · GHSA-5759-5xq5-qw22

delete.php in Plague News System 0.6 and earlier allows remote unauthenticated attackers…

LOW 25

delete.php in Plague News System 0.6 and earlier allows remote unauthenticated attackers to delete news, comments, and shoutbox posts by modifying the id parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01087 Published 2005-07-06 No fix listed

TI-2005-02048 CVE-2005-2167 · GHSA-wf55-cm3r-rvxw

Cross-site scripting (XSS) vulnerability in index.php in Plague News System 0.6 and…

LOW 22

Cross-site scripting (XSS) vulnerability in index.php in Plague News System 0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the cid parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00938 Published 2005-07-06 No fix listed

TI-2005-02047 CVE-2005-2166 · GHSA-85cf-px78-q8mx

SQL injection vulnerability in index.php in Plague News System 0.6 and earlier allows…

LOW 25

SQL injection vulnerability in index.php in Plague News System 0.6 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01007 Published 2005-07-06 No fix listed

Vulnerabilities

Filters

delete.php in Plague News System 0.6 and earlier allows remote unauthenticated attackers…

Cross-site scripting (XSS) vulnerability in index.php in Plague News System 0.6 and…

SQL injection vulnerability in index.php in Plague News System 0.6 and earlier allows…