web-news web-news vulnerabilities and exploits

(subscribe to this query)

PHP remote file inclusion vulnerability in webnews/template.php in Web-News 1.6.3 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the content_page parameter.

Web-news Web-news

1 EDB exploit

SQL injection vulnerability in WEB//NEWS 1.4 allows remote malicious users to execute arbitrary SQL commands via the (1) wn_userpw parameter to startup.php, (2) cat, (3) id, or (4) stof parameter to news.php, or (5) id parameter to print.php.

Stylemotion Web News 1.4

3 EDB exploits

WEB//NEWS 1.4 allows remote malicious users to obtain sensitive information via a direct request to files in the actions directory, which reveal the path in an error message, as demonstrated using cat.add.php.

Stylemotion Web News 1.4

Multiple PHP remote file inclusion vulnerabilities in Web News 1.1 allow remote malicious users to execute arbitrary PHP code via a URL in the config[root_ordner] parameter to (1) index.php, (2) news.php, or (3) feed.php.

Mapos Scripts Web News 1.1

3 EDB exploits

PHP remote file inclusion vulnerability in parse/parser.php in WEB//NEWS (aka webnews) 1.4 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the WN_BASEDIR parameter.

Netwin Webnews 1.1i Netwin Webnews 1.1j Netwin Webnews 1.1k Netwin Webnews 1.1h Netwin Webnews 1.4

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook