czarnews

CzarNews v2.1 — PHP 8.x Port A maintained fork of CzarNews...

EUVD-2025-12449

Malicious code in bioql PyPI...

EUVD-2025-12447

Malicious code in bioql PyPI...

CVE-2025-3968

A vulnerability was found in codeprojects News Publishing Site Dashboard 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /api.php. The manipulation of the argument catid leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-3969

A vulnerability was found in codeprojects News Publishing Site Dashboard 1.0. It has been rated as critical. This issue affects some unknown processing of the file /edit-category.php of the component Edit Category Page. The manipulation of the argument categoryimage leads to unrestricted upload...

CVE-2025-3969

A vulnerability was found in codeprojects News Publishing Site Dashboard 1.0. It has been rated as critical. This issue affects some unknown processing of the file /edit-category.php of the component Edit Category Page. The manipulation of the argument categoryimage leads to unrestricted upload...

CVE-2025-3969 codeprojects News Publishing Site Dashboard Edit Category Page edit-category.php unrestricted upload

A vulnerability was found in codeprojects News Publishing Site Dashboard 1.0. It has been rated as critical. This issue affects some unknown processing of the file /edit-category.php of the component Edit Category Page. The manipulation of the argument categoryimage leads to unrestricted upload...

CVE-2025-3969

CVE-2025-3969 concerns the Codeprojects News Publishing Site Dashboard 1.0. The vulnerability is in the Edit Category Page’s /edit-category.php where manipulating the category_image argument leads to unrestricted file uploads. This could enable remote attackers to upload arbitrary files, with pot...

CVE-2025-3969 codeprojects News Publishing Site Dashboard Edit Category Page edit-category.php unrestricted upload

A vulnerability was found in codeprojects News Publishing Site Dashboard 1.0. It has been rated as critical. This issue affects some unknown processing of the file /edit-category.php of the component Edit Category Page. The manipulation of the argument categoryimage leads to unrestricted upload...

CVE-2025-3968

A vulnerability was found in codeprojects News Publishing Site Dashboard 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /api.php. The manipulation of the argument catid leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-3968

A vulnerability was found in codeprojects News Publishing Site Dashboard 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /api.php. The manipulation of the argument catid leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-3968

CVE-2025-3968 affects codeprojects News Publishing Site Dashboard 1.0. The vulnerability is in the file /api.php, where manipulation of the parameter cat_id enables SQL injection . Exploitation can be performed remotely and, according to multiple sources, the exploit has been disclosed publicly. ...

CVE-2025-3968 codeprojects News Publishing Site Dashboard api.php sql injection

A vulnerability was found in codeprojects News Publishing Site Dashboard 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /api.php. The manipulation of the argument catid leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-3968 codeprojects News Publishing Site Dashboard api.php sql injection

A vulnerability was found in codeprojects News Publishing Site Dashboard 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /api.php. The manipulation of the argument catid leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-3968: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in codeprojects News Publishing Site Dashboard 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /api.php. The manipulation of the argument catid leads to sql injection. The attack can be initiated remotely. The exploit has been...

PT-2025-17996 · Unknown · Codeprojects News Publishing Site Dashboard

Name of the Vulnerable Software and Affected Versions: codeprojects News Publishing Site Dashboard version 1.0 Description: A critical issue affects the processing of the file /edit-category.php of the component "Edit Category Page". The manipulation of the argument category image leads to...

CVE-2025-3969: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in codeprojects News Publishing Site Dashboard 1.0. It has been rated as critical. This issue affects some unknown processing of the file /edit-category.php of the component Edit Category Page. The manipulation of the argument categoryimage leads to unrestricted upload...

PT-2025-17994 · Unknown · Codeprojects News Publishing Site Dashboard

Name of the Vulnerable Software and Affected Versions: codeprojects News Publishing Site Dashboard version 1.0 Description: A critical issue has been identified, affecting the /api.php file. The manipulation of the cat id argument leads to SQL injection. This issue can be exploited remotely...

Code-Projects News Publishing Site Dashboard – Code Issues and Vulnerabilities

Code-Projects News Publishing Site Dashboard is an open source news publishing site dashboard from Code-Projects. A code issue vulnerability exists in version 1.0 of Code-Projects News Publishing Site Dashboard, which stems from a misbehavior of the parameter categoryimage in the file...

CafeLog B2 0.6.1 Weblog and News Publishing Tool b2mail.php b2inc Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/23659/info B2 is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to compromise the application and the...