Export limit exceeded: 425868 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2006-6746

Multiple cross-site scripting (XSS) vulnerabilities in Xt-News 0.1 allow remote attackers to inject arbitrary web script or HTML via the id_news parameter to (1) add_comment.php or (2) show_news.php.

CVSS 2.0 · 4.3 Medium EPSS 1.8% KEV · Not listed
Vendors
Dreaxteam
Products
Xt-news
CVE-2006-6747

SQL injection vulnerability in show_news.php in Xt-News 0.1 allows remote attackers to execute arbitrary SQL commands via the id_news parameter.

CVSS 2.0 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Dreaxteam
Products
Xt-news