Export limit exceeded: 425829 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2008-1649

Cross-site scripting (XSS) vulnerability in staticpages/easypublish/index.php in EasyNews 4.0 allows remote attackers to inject arbitrary web script or HTML via the read parameter in an edp_pupublish action.

CVSS 2.0 · 4.3 Medium EPSS 1.9% KEV · Not listed
Vendors
Myiosoft
Products
Easynews
CVE-2008-1650

SQL injection vulnerability in dynamicpages/index.php in EasyNews 4.0 allows remote attackers to execute arbitrary SQL commands via the read parameter in an edp_Help_Internal_News action.

CVSS 2.0 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Myiosoft
Products
Easynews
CVE-2008-1651

Directory traversal vulnerability in admin/login.php in EasyNews 4.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter.

CVSS 2.0 · 7.5 High EPSS 3.1% KEV · Not listed
Vendors
Myiosoft
Products
Easynews