Snews Security Vulnerabilities and Issues — Snews CVE List

Lucene search

SolucijaSnews

5 matches found

CVE•added 2006/02/15 11:6 a.m.•37 views

CVE-2006-0715

Cross-site scripting (XSS) vulnerability in sNews 1.3 allows remote attackers to inject arbitrary web script or HTML via the comment field.

4.3CVSS5.7AI score0.00416EPSS

CVE•added 2006/07/28 12:4 a.m.•37 views

CVE-2006-3916

Cross-site scripting (XSS) vulnerability in snews.php in sNews (aka Solucija News) 1.4 allows remote attackers to inject arbitrary web script or HTML via the search_query parameter.

4.3CVSS5.9AI score0.00507EPSS

CVE•added 2005/11/27 11:3 a.m.•33 views

CVE-2005-3853

SQL injection vulnerability in snews.php in sNews 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) category parameters to index.php.

7.5CVSS8.8AI score0.00362EPSS

CVE•added 2006/02/15 11:6 a.m.•31 views

CVE-2006-0716

SQL injection vulnerability in index.php in sNews 1.3 allows remote attackers to execute arbitrary SQL commands via the (1) category and (2) id parameters.

7.5CVSS8.4AI score0.00743EPSS

CVE•added 2010/07/30 8:30 p.m.•30 views

CVE-2010-2926

SQL injection vulnerability in index.php in sNews 1.7 allows remote attackers to execute arbitrary SQL commands via the category parameter.

7.5CVSS8.7AI score0.00103EPSS