Vulnerabilities

TI-2006-04517 CVE-2006-4671 · GHSA-2ffv-4gjr-39h9

PHP remote file inclusion vulnerability in headlines.php in Fantastic News 2.1.4, and…

LOW 35

PHP remote file inclusion vulnerability in headlines.php in Fantastic News 2.1.4, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG[script_path] parameter, a different ve…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.028 Published 2006-09-11 No fix listed CWE-94

TI-2006-04138 CVE-2006-4285 · GHSA-4gc3-8hmv-3556

PHP remote file inclusion vulnerability in news.php in Fantastic News 2.1.3 and earlier…

LOW 39

PHP remote file inclusion vulnerability in news.php in Fantastic News 2.1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG[script_path] parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.032 Published 2006-08-22 No fix listed CWE-94

TI-2006-01121 CVE-2006-1154 · GHSA-c8vh-8h4w-hxhr

PHP remote file inclusion vulnerability in archive.php in Fantastic News 2.1.2 allows…

LOW 38

PHP remote file inclusion vulnerability in archive.php in Fantastic News 2.1.2 allows remote attackers to include arbitrary files via the CONFIG[script_path] variable.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02847 Published 2006-03-10 No fix listed CWE-94

TI-2006-00943 CVE-2006-0972 · GHSA-vm57-m29g-7cpf

SQL injection vulnerability in news.php in Tony Baird Fantastic News 2.1.1 allows remote…

LOW 26

SQL injection vulnerability in news.php in Tony Baird Fantastic News 2.1.1 allows remote attackers to execute arbitrary SQL commands via the page parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01342 Published 2006-03-03 No fix listed

TI-2005-03640 CVE-2005-3846 · GHSA-4v4m-xjj9-g6j7

SQL injection vulnerability in news.php in Fantastic News 2.1.1 and earlier allows remote…