Stylemotion Web News vulnerabilities
2 known vulnerabilities affecting stylemotion/web_news.
Total CVEs
2
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2005-2896P3HIGHCVSS 7.5PoCv1.42005-09-14
CVE-2005-2896 [HIGH] CVE-2005-2896: SQL injection vulnerability in WEB//NEWS 1.4 allows remote attackers to execute arbitrary SQL comman
SQL injection vulnerability in WEB//NEWS 1.4 allows remote attackers to execute arbitrary SQL commands via the (1) wn_userpw parameter to startup.php, (2) cat, (3) id, or (4) stof parameter to news.php, or (5) id parameter to print.php.
nvd
CVE-2005-2897P4MEDIUMCVSS 5.0v1.42005-09-14
CVE-2005-2897 [MEDIUM] CVE-2005-2897: WEB//NEWS 1.4 allows remote attackers to obtain sensitive information via a direct request to files
WEB//NEWS 1.4 allows remote attackers to obtain sensitive information via a direct request to files in the actions directory, which reveal the path in an error message, as demonstrated using cat.add.php.
nvd