Vulnerabilidades

Format string vulnerability in newsx NNTP client before 1.4.8 allows local users to execute arbitrary code via format string specifiers that are not properly handled in a call to the syslog function.

Cross-site scripting (XSS) vulnerability in MyNewsGroups 0.4 and 0.4.1 allows remote attackers to inject arbitrary web script or HTML via the subject of a newsgroup post, which is not properly handled by (1) myarticles.php, (2) search.php, (3) stats.php, or (4) standard.lib.php.

NewsPro 1.01 allows remote attackers to gain unauthorized administrator access by setting their authentication cookie to "logged,true".

x_news.php in X-News (x_news) 1.1 and earlier allows remote attackers to gain administrative privileges by stealing and replaying the md5_password cookie.

PHP remote file inclusion vulnerability in customize.php for phpMyNewsletter 0.6.10 allows remote attackers to execute arbitrary PHP code via the l parameter.

MySimpleNews 1.0 allows remote attackers to delete arbitrary email messages via a direct request to vider.php3.

X-News (x_news) 1.1 and earlier allows attackers to authenticate as other users by obtaining the MD5 checksum of the password, e.g. via sniffing or the users.txt data file, and providing it in a cookie.

PHP remote file inclusion vulnerability in News Evolution 2.0 allows remote attackers to execute arbitrary PHP commands via the neurl parameter to (1) backend.php, (2) screen.php, or (3) admin/modules/comment.php.

Static code injection vulnerability in users.php in MySimpleNews allows remote attackers to inject arbitrary PHP code and HTML via the (1) LOGIN, (2) DATA, and (3) MESS parameters, which are inserted into news.php3.

NewsReactor 1.0 uses a weak encryption scheme, which could allow local users to decrypt the passwords and gain access to other users' newsgroup accounts.

The admin.html file in MySimple News 1.0 stores its administrative password in plaintext, which allows remote attackers to gain unauthorized access to the web server by viewing the source of admin.html.

Unknown vulnerability in CGINews before 1.06 allow remote attackers to read arbitrary files via "unfiltered user input."

Múltiples desbordamientos de búfer en mnews 1.22 y anteriores permiten: a un servidor NNTP remoto ejecutar código arbitrario mediante respuestas largas, o a usuarios locales ganar privilegios mediante argumentos de línea de comando largos (-f, -n, -D, -M, -p), o mediante variables de entorno largas (JNAMES,…

CGIScript.net csNews.cgi allows remote attackers to obtain potentially sensitive information, such as the full server pathname and other configuration settings, via the viewnews command with an invalid database, which leaks the information in error messages.

CGIScript.net csNews.cgi allows remote authenticated users to execute arbitrary Perl code via terminating quotes and metacharacters in text fields of the "Advanced Settings" capability.

CGIScript.net csNews.cgi allows remote attackers to obtain database files via a direct URL-encoded request to (1) default%2edb or (2) default%2edb.style, or remote authenticated users to perform administrative actions via (3) a database parameter set to default%2edb.

CGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files, and possibly gain privileges, via the (1) pheader or (2) pfooter parameters in the "Advanced Settings" capability.

Cross-site scripting vulnerability in Board-TNK 1.3.1 and earlier allows remote attackers to execute arbitrary Javascript via the WEB parameter.

Cross-site scripting vulnerability in News-TNK 1.2.1 and earlier allows remote attackers to execute arbitrary Javascript via the WEB parameter.

La función GetPassword en function.php de SiteNews 0.10 y 0.11 permite a atacantes remotos ganar privilegios y añadir usuarios dando un nombre de usuario inexistente y la suma de comprobación (cheksum) MD5 de una contraseña vacía, lo que hace que GetPassword produzca y compare una contraseña en blanco para el usuario…

El programa CGI Netwin WebNews 1.1k incluye por defecto ciertos nombres de usuarios y contraseñas en texto claro que no pueden ser borrados por el administrador, lo que permite a atacantes remotos ganar privilegios mediante las combianciones de nombres de usuario/contraseña:…

Desbordamiento de búfer en Netwin WebNews CGI program 1.1, Webnews.exe, permite a atacantes remotos ejecutar código arbitrarior mediante un argumento de grupo largo.

Vulnerabilidad de atravesamiento de directorios en ans.pl en Avenger's New Systems (ANS) 2.11 y anteriosres permite a atacantes remotos determinar la existencia de ficheros arbitrarios o ejecutar cualquier programa Perl en el sistema mediante un .. (punto punto) en el parámetro p, el cual lee el fichero objetivo e…

ans.pl en Avenger's New Systems (ANS) 2.11 y anteriores permite a atacantes remotos ejecutar código arbitrario mediante metacaractéres de shell en el parámetro p (plugin)

Directory traversal vulnerability in the comments action in easyNews 1.5 and earlier allows remote attackers to modify news.dat, template.dat and possibly other files via a ".." in the cid parameter.