CVE-2007-2300

CVE-2007-2300 affects Endy Kristanto Surat kabar / News Management Online (phpwebnews) 0.2 and earlier. The vulnerability is a Cross-Site Scripting (XSS) flaw in the m_txt parameter that can be exploited via iklan.php, index.php, or bukutamu.php to inject arbitrary web script/HTML. Affected compo...

CVE-2008-6813

CVE-2008-6813 affects phpWebNews 0.2 MySQL Edition; the vulnerability is a SQL injection in index.php via the id_kat parameter, allowing remote attackers to issue arbitrary SQL commands. The issue is documented across multiple sources; the connected documents provide the vulnerability description...

CVE-2008-6812

The CVE-2008-6812 issue affects phpWebNews 0.2 MySQL Edition, specifically the bukutamu.php component, where the det parameter is vulnerable to SQL injection. This allows remote attackers to execute arbitrary SQL commands. The NVD data shows a high severity (CVSS v2 base score 7.5) with network a...