73 matches found
CVE-2001-1526
Cross-site scripting XSS vulnerability in the comments action in index.php in easyNews 1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the zeit parameter...
EUVD-2008-1651
Malware in sbrugna...
EUVD-2001-1417
Malware in sbrugna...
EUVD-2007-3320
Malware in sbrugna...
EUVD-2001-1502
Malware in sbrugna...
EUVD-2008-1650
Malware in sbrugna...
EUVD-2001-1504
Malware in sbrugna...
EUVD-2001-1503
Malware in sbrugna...
EUVD-2007-3321
Malware in sbrugna...
EUVD-2006-5397
Malware in sbrugna...
CVE-2001-1525
Directory traversal vulnerability in the comments action in easyNews 1.5 and earlier allows remote attackers to modify news.dat, template.dat and possibly other files via a ".." in the cid parameter...
Easynews <= 4.4.1 (admin.php) Authentication Bypass Vulnerability
No description provided by source. +------------------------------------------------------------------------------------------- + Easynews = 4.4.1 admin.php Authentication Bypass Vulnerability +------------------------------------------------------------------------------------------- + Affected...
EasyNews 1.5 NewsDatabase/Template Modification Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3643/info EasyNews is a free, open-source script for displaying news stories on a website. EasyNews is prone to a vulnerability which may allow a remote attacker to modify information in its Newsdatabase. As a result, a...
EASYNEWS news management system v1. 0 1 official version has multiple vulnerabilities-vulnerability warning-the black bar safety net
Source: San ㄗ Feng 訫 locks of love'S Blog EASYNEWS news management system v1. 0 1 official version has multiple vulnerabilities A ReadNews. asp requestNewsID=Request. QueryString"NewsID" 'pass to give the news numbers NewsID rs. Source="select from News where NewsID=" & amp; requestNewsID 'query...
Easy News 4.0 Cross Site Scripting
-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...
PHPEasyNews 1.13 RC2 - 'POST' SQL Injection
-+================================================================================+- -+ PHPEasyNews = 1.13 RC2 SQL Injection Vulnerabilitys +- -+================================================================================+- Discovered By: t0pP8uZz Discovered On: 4 JUNE 2008 Script Download:...
Sql injection
SQL injection vulnerability in dynamicpages/index.php in EasyNews 4.0 allows remote attackers to execute arbitrary SQL commands via the read parameter in an edpHelpInternalNews action...
Directory traversal
Directory traversal vulnerability in admin/login.php in EasyNews 4.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...
CVE-2008-1649
Cross-site scripting XSS vulnerability in staticpages/easypublish/index.php in EasyNews 4.0 allows remote attackers to inject arbitrary web script or HTML via the read parameter in an edppupublish action...
Cross site scripting
Cross-site scripting XSS vulnerability in staticpages/easypublish/index.php in EasyNews 4.0 allows remote attackers to inject arbitrary web script or HTML via the read parameter in an edppupublish action...