Browse CVEs

HIGH 7.5 CVE-2006-3359 Multiple SQL injection vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject arbitrary web script or HTML via the (1) wor… Newsphp Mitigation only Fix from $1,9502006-07-06 MEDIUM 6.8 CVE-2006-3358 Multiple cross-site scripting (XSS) vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject arbitrary web script or HTML vi… Newsphp Mitigation only Fix from $1,6002006-07-06 HIGH 7.5 CVE-2006-0413 Multiple SQL injection vulnerabilities in index.php in NewsPHP allow remote attackers to execute arbitrary SQL commands via the (1) discuss, (2) tim,… Newsphp No fix yet Fix from $1,9502006-01-25 HIGH 10.0 CVE-2004-2689 NewsPHP allows remote attackers to gain unauthorized administrative access by setting a cookie to the "autorized=admin; root=admin" value. Newsphp Mitigation only Fix from $1,9502004-12-31 HIGH 8.5 CVE-2004-2690 Unrestricted file upload vulnerability in the Administration Panel for NewsPHP allows remote authenticated administrators to upload and execute arbit… Newsphp Mitigation only Fix from $1,9502004-12-31 HIGH 7.5 CVE-2003-0754 nphpd.php in newsPHP 216 and earlier allows remote attackers to bypass authentication via an HTTP request with a modified nphp_users array, which is … Newsphp after 216 Fix from $1,9502003-10-20 MEDIUM 5.0 CVE-2003-0753 nphpd.php in newsPHP 216 and earlier allows remote attackers to read arbitrary files via a full pathname to the target file in the nphp_config[LangFi… Newsphp after 216 Fix from $1,6002003-10-20