Export limit exceeded: 425857 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2005-0646

SQL injection vulnerability in auth.php in paNews 2.0.4b allows remote attackers to execute arbitrary SQL via the mysql_prefix parameter.

CVSS 2.0 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Php Arena
Products
Panews
CVE-2005-0647

admin_setup.php in paNews 2.0.4b allows remote attackers to inject arbitrary PHP code via the (1) $form[comments] or (2) $form[autoapprove] parameters, which are written to config.php.

CVSS 2.0 · 5.0 Medium EPSS 4.2% KEV · Not listed
Vendors
Php Arena
Products
Panews