Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2008-0723

Cross-site scripting (XSS) vulnerability in mynews.inc.php in MyNews 1.6.4, and other earlier 1.6.x versions, allows remote attackers to inject arbitrary web script or HTML via the hash parameter in an admin action to index.php, a different vulnerability than CVE-2006-2208.1.

CVSS 2.0 · 4.3 Medium EPSS 1.4% KEV · Not listed
Vendors
Planetluc
Products
Mynews
CVE-2006-2208

Multiple cross-site scripting (XSS) vulnerabilities in mynews.inc.php in MyNews 1.6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) hash and (2) page parameters.

CVSS 2.0 · 4.3 Medium EPSS 1.9% KEV · Not listed
Vendors
Planetluc
Products
Mynews