Vscripts.pl Qlnews
2 CVEs affecting Vscripts.pl Qlnews. Latest disclosed: 2006-04-02. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2006-1576 | | 2006-04-02 | Direct static code injection vulnerability in QLnews 1.2 allows remote authenticated administrators to execute arbitrary PHP code by modifying config.php. | |
CVE-2006-1575 | | 2006-04-02 | Multiple cross-site scripting (XSS) vulnerabilities in news.php in QLnews 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) autorx… |