EUVD-2020-18161

Malware in sbrugna...

CVE-2020-25475

SimplePHPscripts News Script PHP Pro 2.3 is affected by a SQL Injection via the id parameter in an editNews action...

News Script PHP Pro SQL Injection Vulnerability

News Script PHP Pro is a PHP/MySQL based web script from Simple PHP Scripts for displaying news on your website. News Script PHP Pro 2.3 suffers from a SQL injection vulnerability. The vulnerability can be exploited to conduct SQL injection attacks via the id parameter in the editNews action...

CVE-2020-25475

SimplePHPscripts News Script PHP Pro 2.3 is affected by a SQL Injection via the id parameter in an editNews action...

CVE-2020-25475

SimplePHPscripts News Script PHP Pro 2.3 is affected by a SQL Injection via the id parameter in an editNews action...

Sql injection

SimplePHPscripts News Script PHP Pro 2.3 is affected by a SQL Injection via the id parameter in an editNews action...

CVE-2020-25475: Improper Neutralization of Special Elements used in an SQL Command

SimplePHPscripts News Script PHP Pro 2.3 is affected by a SQL Injection via the id parameter in an editNews action...

CVE-2011-1129: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the EditNews function in ManageNews.php in Simple Machines Forum SMF before 1.1.13, and 2.x before 2.0 RC5, might allow remote authenticated users to inject arbitrary web script or HTML via a saveitems action...

CVE-2009-4250

Multiple cross-site scripting XSS vulnerabilities in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allow remote attackers to inject arbitrary web script or HTML via 1 the result parameter to register.php; 2 the user parameter to search.php; the 3 catmsg, 4 sourcemsg, 5 postponedselected, 6...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allow remote attackers to inject arbitrary web script or HTML via 1 the result parameter to register.php; 2 the user parameter to search.php; the 3 catmsg, 4 sourcemsg, 5 postponedselected, 6...

CVE-2009-4250: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allow remote attackers to inject arbitrary web script or HTML via 1 the result parameter to register.php; 2 the user parameter to search.php; the 3 catmsg, 4 sourcemsg, 5 postponedselected, 6...

CVE-2009-4250

Multiple cross-site scripting XSS vulnerabilities in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allow remote attackers to inject arbitrary web script or HTML via 1 the result parameter to register.php; 2 the user parameter to search.php; the 3 catmsg, 4 sourcemsg, 5 postponedselected, 6...

CVE-2009-4174: Undefined Security Weakness

The editnews module in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b, when magicquotesgpc is disabled, allows remote authenticated users with Journalist or Editor access to bypass administrative moderation and edit previously submitted articles via a modified id parameter in a doeditnews...

CVE-2009-4116: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in CutePHP CuteNews 1.4.6, when magicquotesgpc is disabled, allow remote authenticated users with editor or administrative application access to read arbitrary files via a .. dot dot in the source parameter in a 1 list or 2 editnews action to the...

Directory traversal

Directory traversal vulnerability in the editnews module inc/editnews.mdu in index.php in CuteNews 1.4.1 allows remote attackers to read or modify files via the source parameter in the 1 editnews or 2 doeditnews action. NOTE: this can also produce resultant XSS when the target file does not exist...

CVE-2006-1925

Directory traversal vulnerability in the editnews module inc/editnews.mdu in index.php in CuteNews 1.4.1 allows remote attackers to read or modify files via the source parameter in the 1 editnews or 2 doeditnews action. NOTE: this can also produce resultant XSS when the target file does not exist...

CVE-2006-1925: Undefined Security Weakness

Directory traversal vulnerability in the editnews module inc/editnews.mdu in index.php in CuteNews 1.4.1 allows remote attackers to read or modify files via the source parameter in the 1 editnews or 2 doeditnews action. NOTE: this can also produce resultant XSS when the target file does not exist...