Vulnerabilidades

Cross-site scripting (XSS) vulnerability in index.php in NewsPHP allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter. NOTE: this issue might overlap vector 3 in CVE-2006-3358.

Unrestricted file upload vulnerability in the Administration Panel for NewsPHP allows remote authenticated administrators to upload and execute arbitrary code instead of video files.

The documentation for CuteNews 1.3.6 and possibly other versions specifies that files under cutenews/data must be manually given world-writable permissions, which allows local users to insert false news, delete news, and possibly gain privileges or have other unknown impact.

NewsPHP allows remote attackers to gain unauthorized administrative access by setting a cookie to the "autorized=admin; root=admin" value.

admin.php de Newsletter ZWS permite a atacantes remotos ganar privilegios administrativos mediante una operación list_user con el parámetro ulevel establecido a 1 (nivel de administrador), lo que lista todos los usuarios y sus contraseñas.

Cross-site scripting (XSS) vulnerability in VirtuaNews Admin Panel Pro 1.0.3 allows remote attackers to execute arbitrary script as other users via (1) the mainnews parameter in admin.php, (2) the expand parameter in admin.php, (3) the id parameter in admin.php, (4) the catid parameter in admin.php, or (5) an unnamed…

Directory traversal vulnerability in functions.php in PhpNewsManager 1.46 allows remote attackers to retrieve arbitrary files via .. (dot dot) sequences in the clang parameter.

Cross-site scripting (XSS) vulnerability in index.php in PsNews 1.1 allows remote attackers to inject arbitrary web script or HTML via the no parameter.

Cross-site scripting (XSS) vulnerability in index.php in CuteNews 1.3.6 and earlier allows remote attackers with Administrator, Editor, Journalist or Commenter privileges to inject arbitrary web script or HTML via the mod parameter.

PHP remote file inclusion vulnerability in CuteNews 1.3.6 and earlier allows remote attackers to execute arbitrary PHP code via the cutepath parameter to (1) show_archives.php or (2) show_news.php.

Cross-site scripting (XSS) vulnerability in (1) show_archives.php, (2) show_news.php, and possibly other php files in CuteNews 1.3.1 allows remote attackers to inject arbitrary script or HTML via the id parameter.

Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is logged in, via a comment that contains an img bbcode tag that calls index.php with the signup action, which is executed when the administrator's browser loads the page with the img tag.

News Manager Lite 2.5 allows remote attackers to bypass authentication and gain administrator privileges by setting the ADMIN parameter in the NEWS_LOGIN cookie.

Multiple SQL injection vulnerabilities in News Manager Lite 2.5 allow remote attackers to execute arbitrary SQL code via the (1) ID parameter to more.asp, (2) ID parameter to category_news.asp, or (3) filter parameter to news_sort.asp.

PHP remote file include vulnerability in Derek Ashauer ashNews 0.83 allows remote attackers to include and execute arbitrary remote files via a URL in the pathtoashnews parameter to (1) ashnews.php and (2) ashheadlines.php.

PHP remote file inclusion vulnerability in CuteNews 0.88 allows remote attackers to execute arbitrary PHP code via a URL in the cutepath parameter in (1) shownews.php, (2) search.php, or (3) comments.php.

nphpd.php in newsPHP 216 and earlier allows remote attackers to bypass authentication via an HTTP request with a modified nphp_users array, which is used for authentication.

nphpd.php in newsPHP 216 and earlier allows remote attackers to read arbitrary files via a full pathname to the target file in the nphp_config[LangFile] parameter.

admin.php en Digi-ads 1.1 permite a atacantes remotos saltarse la autenticación mediante una galletita (cookie) con el nombre de usuario establecido al nombre del administrador, lo que satisface una condición inapropiada en admin.php de no requerir una contraseña correcta.

admin.php en Digi-news 1.1 permite a atacantes remotos saltarse la autenticación mediante una galletita (cookie) con el nombre de usuario establecido al nombre del administrador, lo que satisface una condición inapropiada en admin.php de no requerir una contraseña correcta.

Vulnerabildad de secuencias de comandos en sitios cruzados en Lednews 0.7 permite a atacantes remotos insertar script web arbitrario mediante un elemento de noticas.

objects.inc.php4 en BLNews 2.1.3 permite a atacantes remotos ejecutar código arbitrario mediante un parámetro Server[path] que apunta a código malicioso en un sitio web controlado por el atacante.

El plugin para gkrellm gkrellm-newsticker anteriores a 0.3-3.1 permite a atacantes remotos causar una denegación de servicio (caída) mediante enlaces o elementos de título conteniendo múltiples líneas.

El plugin para gkrellm gkrellm-newsticker anteriores a 0.3-3.1 permite a atacantes remotos ejecutar comandos arbitrarios mediante metacaractéres de shell en el título de la noticia de una URI.

csNewsPro.cgi in CGIScript.net csNews Professional (csNewsPro) allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function.