EUVD-2005-0648

Malware in sbrugna...

PANews 2.0 - PHP Remote Code Execution

PANews 2.0 - PHP Remote Code Execution source: https://www.securityfocus.com/bid/12611/info PaNews is reported prone to a remote PHP script code execution vulnerability. It is reported that PHP script code may be injected into the PaNews software through the 'showcopy' parameter of the...

PANews 2.0 - PHP Remote Code Execution

source: https://www.securityfocus.com/bid/12611/info PaNews is reported prone to a remote PHP script code execution vulnerability. It is reported that PHP script code may be injected into the PaNews software through the 'showcopy' parameter of the 'adminsetup.php' script. Reports indicate that wh...

[PersianHacker.NET 200505-06] paNews v2.0b4 XSS Vulnerability

PersianHacker.NET 200505-06 paNews v2.0b4 XSS Vulnerability Date: 2005 February Bug Number: 06 paNews is a news management script to use on your site. Users can use paCode, special code designed to allow the adding of images and font changes in the posts without allowing users to use HTML to post...

paNews comment.php showpost Parameter XSS

According to its banner, the remote host is running a version of paNews that fails to sanitize input to the 'showpost' parameter of the 'comment.php' script before using it to generate dynamic web content. By coercing an unsuspecting user into visiting a malicious website, an attacker may be able...