Export limit exceeded: 425852 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2006-5282

Multiple PHP remote file inclusion vulnerabilities in SH-News 3.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter to (1) report.php, (2) archive.php, (3) comments.php, (4) init.php, or (5) news.php.

CVSS 2.0 · 7.5 High EPSS 3.5% KEV · Not listed
Vendors
Sh-news
Products
Sh-news
CVE-2006-6801

PHP remote file inclusion vulnerability in misc.php in SH-News 0.93, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the news_cfg[path] parameter.

CVSS 2.0 · 6.8 Medium EPSS 2.1% KEV · Not listed
Vendors
Sh-news
Products
Sh-news
CVE-2007-6391

SQL injection vulnerability in patch/comments.php in SH-News 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Sh-news
Products
Sh-news