Vendor/product archive

aweb_labs / awebnews CVEs

Beta · best-effort

3 CVEs tagged to aweb_labs / awebnews — 0 Critical, 0 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to aweb_labs vendor archive

CVE-2007-1247

Published Mar 3, 2007

Multiple PHP remote file inclusion vulnerabilities in aWeb Labs aWebNews 1.5 allow remote attackers to execute arbitrary PHP code via a URL in the path_to_news parameter to (1) li…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2006-1612

Published Apr 4, 2006

Multiple cross-site scripting (XSS) vulnerabilities in visview.php in aWebNews 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) yname, (2) emailadd, (…

CVSS 5.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2006-1613

Published Apr 4, 2006

Multiple SQL injection vulnerabilities in aWebNews 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) user123 variable in (a) login.php or (b) fpass.php; or…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1