CVE-2006-1543: Undefined Security Weakness

Multiple SQL injection vulnerabilities in vscripts aka Kuba Kunkiewicz VNews 1.2 allow remote attackers to execute arbitrary SQL commands via the 1 loginvar parameter in a admin/admin.php, and the 2 news and 3 nom parameters in b news.php...

[SA19435] VNews Multiple Vulnerabilities

TITLE: VNews Multiple Vulnerabilities SECUNIA ADVISORY ID: SA19435 VERIFY ADVISORY: http://secunia.com/advisories/19435/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data, System access WHERE: From remote SOFTWARE: VNews 1.x http://secunia.com/product/9043/...

CVE-2006-1544: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in news.php in vscripts aka Kuba Kunkiewicz VNews 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 autorkomentarza and 2 tresckomentarza parameters...