Scriptphp Pronews
3 CVEs affecting Scriptphp Pronews. Latest disclosed: 2006-12-15. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2006-6580 | | 2006-12-15 | admin/change.php in ProNews 1.5 does not check whether a user is permitted to change news items, which allows remote attackers to add or delete information wit… | |
CVE-2006-6519 | | 2006-12-14 | SQL injection vulnerability in lire-avis.php in ProNews 1.5 allows remote attackers to execute arbitrary SQL commands via the aa parameter. | |
CVE-2006-6518 | | 2006-12-14 | Multiple cross-site scripting (XSS) vulnerabilities in ProNews 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) pseudo, (2) email… |