Newsoffice Security Vulnerabilities and Issues — Newsoffice CVE List

Lucene search

NewanzNewsoffice

2 matches found

CVE•added 2008/04/22 4:41 a.m.•27 views

CVE-2008-1903

PHP remote file inclusion vulnerability in news_show.php in Newanz NewsOffice 1.0 and 1.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the newsoffice_directory parameter.

7.5CVSS7.6AI score0.07575EPSS

CVE•added 2010/07/25 2:4 a.m.•26 views

CVE-2010-2844

Cross-site scripting (XSS) vulnerability in news_show.php in Newanz NewsOffice 2.0.18 allows remote attackers to inject arbitrary web script or HTML via the n-cat parameter.

4.3CVSS5.9AI score0.0209EPSS