CVE-2002-0290

Netwin WebNews WebNews.cgi (Webnews.exe) version 1.1 is affected by a buffer overflow when processing a long group argument in the WebNews CGI, allowing remote attackers to execute arbitrary code. The issue is described across CVE-2002-0290 records (NVD/Nessus/OpenVAS) with a base CVSS v2 score o...

CVE-2006-5100

CVE-2006-5100 affects WEB//NEWS (aka webnews) 1.4 and earlier. The vulnerability is a PHP remote file inclusion in parse/parser.php that lets an attacker supply a URL via the WN_BASEDIR parameter and cause remote PHP code execution. Affected component is the webnews parser; root cause involves in...

CVE-2002-0310

CVE-2002-0310 affects Netwin WebNews 1.1k CGI. The issue arises from default usernames and cleartext passwords that cannot be deleted by the administrator, enabling remote attackers to gain privileges using the listed credential pairs (testweb/newstest, alwn3845/imaptest, alwi3845/wtest3452, test...