CVE-2003-1292

CVE-2003-1292 concerns ashNews 0.83. The vulnerability is a PHP remote file inclusion (RFI) where an attacker can use a URL in the pathtoashnews parameter to ashnews.php and ashheadlines.php to include and execute remote files. Affected software: ashNews 0.83. The CVSS details from NVD indicate a...

CVE-2006-0524

CVE-2006-0524 affects ashNews 0.83 (ashnews.php) by a cross-site scripting (XSS) flaw that allows an attacker to inject arbitrary script/HTML through the id parameter. The core issue is improper handling of the id input in ashNews, enabling crafted URLs to execute code in a victim’s browser. Sour...