Reamday Enterprises Magic News Plus

3 CVEs affecting Reamday Enterprises Magic News Plus. Latest disclosed: 2007-03-02. Critical: 0, High: 0.

Top CVEs affecting Reamday Enterprises Magic News Plus
CVESeverityScorePublishedSummary
CVE-2007-11422007-03-02Cross-site scripting (XSS) vulnerability in Magic News Plus 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the link_parameters parame…
CVE-2007-11412007-03-02PHP remote file inclusion vulnerability in preview.php in Magic News Plus 1.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the php_scri…
CVE-2006-01572006-01-10settings.php in Reamday Enterprises Magic News Plus 1.0.3 allows remote attackers to change the administrator password via a change action that specifies ident…