Vulnerabilities

TI-2008-06501 CVE-2008-6813 · GHSA-pmg7-3rm7-9hg6

SQL injection vulnerability in index.php in phpWebNews 0.2 MySQL Edition allows remote…

LOW 35

SQL injection vulnerability in index.php in phpWebNews 0.2 MySQL Edition allows remote attackers to execute arbitrary SQL commands via the id_kat parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00987 Published 2009-05-21 No fix listed CWE-89

TI-2008-06500 CVE-2008-6812 · GHSA-xvjm-g277-p3fj

SQL injection vulnerability in bukutamu.php in phpWebNews 0.2 MySQL Edition allows remote…

LOW 35

SQL injection vulnerability in bukutamu.php in phpWebNews 0.2 MySQL Edition allows remote attackers to execute arbitrary SQL commands via the det parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00987 Published 2009-05-21 No fix listed CWE-89

TI-2007-02218 CVE-2007-2300 · GHSA-98mf-x6gj-mfg3

Multiple cross-site scripting (XSS) vulnerabilities in Endy Kristanto Surat kabar / News…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in Endy Kristanto Surat kabar / News Management Online (aka phpwebnews) 0.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the m_txt para…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01895 Published 2007-04-26 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in index.php in phpWebNews 0.2 MySQL Edition allows remote…

SQL injection vulnerability in bukutamu.php in phpWebNews 0.2 MySQL Edition allows remote…

Multiple cross-site scripting (XSS) vulnerabilities in Endy Kristanto Surat kabar / News…