5 matches found
CVE-2025-1874
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "description" parameter in admin/add-category.php...
CVE-2025-1871
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "category" and "subcategory" parameters in admin/add-subcategory.php...
CVE-2025-1873
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagetitle" and "pagedescription" parameters in admin/contactus.php...
CVE-2025-1875
The CVE-2025-1875 entry documents an SQL injection in 101news version 1.0, exploitable via the searchtitle parameter in search.php. The vulnerability is described across multiple sources and indicates a critical impact, but the provided materials do not specify an exploit method, affected platfor...
CVE-2025-1870
CVE-2025-1870 : A SQL injection vulnerability affects the 101news product, version 1.0, specifically in the admin/aboutus.php file via the “pagedescription” parameter. Reported impacts indicate high confidentiality, integrity, and availability risks (per CVSS metrics in the public entries). The c...