Vendor/product archive

powerscripts / powernews CVEs

Beta · best-effort

2 CVEs tagged to powerscripts / powernews — 0 Critical, 1 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to powerscripts vendor archive

CVE-2009-0705

Published Feb 23, 2009

SQL injection vulnerability in news.php in PowerScripts PowerNews 2.5.4, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the newsi…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2008-0742

Published Feb 13, 2008

Multiple directory traversal vulnerabilities in PowerScripts PowerNews 2.5.6 allow remote attackers to read and include arbitrary files via a .. (dot dot) in the (1) subpage param…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1