CVE-2010-2926
- EPSS 0.91%
- Veröffentlicht 30.07.2010 20:30:04
- Zuletzt bearbeitet 16.06.2026 23:21:46
SQL injection vulnerability in index.php in sNews 1.7 allows remote attackers to execute arbitrary SQL commands via the category parameter.
CVE-2006-3916
- EPSS 1.27%
- Veröffentlicht 28.07.2006 00:04:00
- Zuletzt bearbeitet 16.06.2026 22:28:04
Cross-site scripting (XSS) vulnerability in snews.php in sNews (aka Solucija News) 1.4 allows remote attackers to inject arbitrary web script or HTML via the search_query parameter.
CVE-2006-0715
- EPSS 1.71%
- Veröffentlicht 15.02.2006 11:06:00
- Zuletzt bearbeitet 16.06.2026 22:21:08
Cross-site scripting (XSS) vulnerability in sNews 1.3 allows remote attackers to inject arbitrary web script or HTML via the comment field.
CVE-2006-0716
- EPSS 1.29%
- Veröffentlicht 15.02.2006 11:06:00
- Zuletzt bearbeitet 16.06.2026 22:21:08
SQL injection vulnerability in index.php in sNews 1.3 allows remote attackers to execute arbitrary SQL commands via the (1) category and (2) id parameters.
CVE-2005-3853
- EPSS 1.12%
- Veröffentlicht 27.11.2005 11:03:00
- Zuletzt bearbeitet 16.06.2026 22:17:45
SQL injection vulnerability in snews.php in sNews 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) category parameters to index.php.