CVE-2002-0306

CVE-2002-0306 affects Avenger's News System (ANS) up to version 2.11. The flaw allows remote attackers to execute arbitrary commands by supplying shell metacharacters in the p (plugin) parameter of ans.pl. This is a command‑injection vulnerability impacting the plugin parameter, with the NVD indi...

CVE-2002-0307

The CVE-2002-0307 vulnerability affects Avenger's News System (ANS) versions 2.11 and earlier, specifically in the script file ans.pl. The flaw is a directory traversal via the p parameter, allowing an attacker to read arbitrary files and, by feeding content to Perl’s eval, potentially execute co...