Vulnerability index

Browse CVEs

7 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Newsphp HIGH 7.5
CVE-2006-3359

Multiple SQL injection vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject arbitrary web script or HTML via the (1) wor…

Mitigation only
Fix from $1,950 2006-07-06
Newsphp MEDIUM 6.8
CVE-2006-3358

Multiple cross-site scripting (XSS) vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject arbitrary web script or HTML vi…

Mitigation only
Fix from $1,600 2006-07-06
Newsphp HIGH 7.5
CVE-2006-0413

Multiple SQL injection vulnerabilities in index.php in NewsPHP allow remote attackers to execute arbitrary SQL commands via the (1) discuss, (2) tim,…

No fix yet
Fix from $1,950 2006-01-25
Newsphp HIGH 10.0
CVE-2004-2689

NewsPHP allows remote attackers to gain unauthorized administrative access by setting a cookie to the "autorized=admin; root=admin" value.

Mitigation only
Fix from $1,950 2004-12-31
Newsphp HIGH 8.5
CVE-2004-2690

Unrestricted file upload vulnerability in the Administration Panel for NewsPHP allows remote authenticated administrators to upload and execute arbit…

Mitigation only
Fix from $1,950 2004-12-31
Newsphp HIGH 7.5
CVE-2003-0754

nphpd.php in newsPHP 216 and earlier allows remote attackers to bypass authentication via an HTTP request with a modified nphp_users array, which is …

Fix: after 216
Fix from $1,950 2003-10-20
Newsphp MEDIUM 5.0
CVE-2003-0753

nphpd.php in newsPHP 216 and earlier allows remote attackers to read arbitrary files via a full pathname to the target file in the nphp_config[LangFi…

Fix: after 216
Fix from $1,600 2003-10-20