Search vulnerabilities

Results 2

Export CSV
CVE-2007-5370

Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/dnewsweb.exe in NetWin DNewsWeb (DNews News Server) 57e1 allow remote attackers to inject arbitrary web script or HTML via the (1) group or (2) utag parameter.

CVSS 2.0 · 4.3 Medium EPSS 1.8% KEV · Not listed
Vendors
Products
CVE-2000-0423

Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd, and utag.

CVSS 2.0 · 5.0 Medium EPSS 7.8% KEV · Not listed
Vendors
Products