Corenews

Corenews

3 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.4

CVE-2006-2032

Exploit
  • EPSS 1.08%
  • Veröffentlicht 26.04.2006 00:06:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Multiple SQL injection vulnerabilities in Core CoreNews 2.0.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) icon_id and (2) userid parameters in preview.php.

6.4

CVE-2006-2033

Exploit
  • EPSS 0.64%
  • Veröffentlicht 26.04.2006 00:06:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

PHP remote file inclusion vulnerability in Core CoreNews 2.0.1 and earlier allows remote authenticated users to execute arbitrary commands via the show parameter. NOTE: this is a different vector than CVE-2006-1212, although it might be the same pri...

7.5

CVE-2006-1212

  • EPSS 5.62%
  • Veröffentlicht 14.03.2006 01:06:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Unspecified vulnerability in index.php in Core CoreNews 2.0.1 allows remote attackers to execute arbitrary commands via the page parameter, possibly due to a PHP remote file include vulnerability. NOTE: this vulnerability could not be confirmed by s...