EUVD-2006-2147

Malware in sbrugna...

EUVD-2006-2146

Malware in sbrugna...

CVE-2009-4348

The CVE-2009-4348 entry concerns Harold Bakker’s NewsScript (HB-NS) 1.3, where a Cross‑Site Scripting (XSS) flaw exists in index.php. The bug is triggered via the topic parameter in a topic action, enabling remote attackers to inject arbitrary script/HTML. This vulnerability is documented as a se...

CVE-2009-4262

Harold Bakker's NewsScript HB-NS 1.3 allows remote attackers to obtain access to the admin control panel via a direct request to admin.php...

CVE-2009-4262

HB-NS NewsScript 1.3 is affected by CVE-2009-4262, where remote attackers can obtain access to the admin control panel by making a direct request to admin.php. The vulnerability is described in multiple sources (NVD) with a CVSS v2 base score of 7.5 (HIGH) and an attack vector of NETWORK, requiri...

HB-NS 1.3 Administrative Access

====================================================== news script HB-NS v1.3 Remote Admin Vulnerability Found by: kurdish hackers team C0ntact : pshela at YaHoo .com Groups : Kurd-Team site : www.kurdteam.org ======================================================= +++++++++++++++++++ Script...

CVE-2006-2145

Multiple SQL injection vulnerabilities in index.php in HB-NS 1.1.6 allow remote attackers to execute arbitrary SQL commands via the 1 topic or 2 id parameter...

Sql injection

Multiple SQL injection vulnerabilities in index.php in HB-NS 1.1.6 allow remote attackers to execute arbitrary SQL commands via the 1 topic or 2 id parameter...

CVE-2006-2146

Multiple cross-site scripting XSS vulnerabilities in index.php in HB-NS 1.1.6 allow remote attackers to inject arbitrary web script or HTML via the 1 postername, 2 posteremail, 3 posterhomepage, or 4 message parameter...

CVE-2006-2146

Multiple cross-site scripting XSS vulnerabilities in index.php in HB-NS 1.1.6 allow remote attackers to inject arbitrary web script or HTML via the 1 postername, 2 posteremail, 3 posterhomepage, or 4 message parameter...

CVE-2006-2145

In the provided documents, CVE-2006-2145 affects HB-NS 1.1.6 and relates to multiple SQL injection flaws in index.php that allow remote attackers to execute arbitrary SQL commands via the (1) topic or (2) id parameter. The NVD entry lists a CVSS v2 base score of 6.4 (Medium) with network attack v...

CVE-2006-2146

HB-NS (Harold Bakker’s NewsScript) 1.1.6 contains multiple cross-site scripting (XSS) vulnerabilities in index.php. The CVE-2006-2146 entry states remote attackers can inject arbitrary script/HTML via the (1) poster_name, (2) poster_email, (3) poster_homepage, or (4) message parameters. The NVD e...