Powerscripts / Powernews

2 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2009-0705	SQL injection vulnerability in news.php in PowerScripts PowerNews 2.5.4, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL co…	MEDIUM	6.8	Feb 23, 2009
CVE-2008-0742	Multiple directory traversal vulnerabilities in PowerScripts PowerNews 2.5.6 allow remote attackers to read and include arbitrary files via a .. (dot dot) in t…	HIGH	7.5	Feb 13, 2008

Rows per page

Showing 1 to 2 of 2 CVEs