Show filters
6 Total Results
Displaying 1-6 of 6
Sort by:
Attacker Value
Unknown

CVE-2006-6542

Disclosure Date: December 14, 2006 (last updated October 04, 2023)
SQL injection vulnerability in news.php in Fantastic News 2.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
0
0
Attacker Value
Unknown

CVE-2006-4671

Disclosure Date: September 11, 2006 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in headlines.php in Fantastic News 2.1.4, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG[script_path] parameter, a different vector than CVE-2006-1154.
0
0
Attacker Value
Unknown

CVE-2006-4285

Disclosure Date: August 22, 2006 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in news.php in Fantastic News 2.1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG[script_path] parameter. NOTE: it was later reported that 2.1.5 is also affected.
0
0
Attacker Value
Unknown

CVE-2006-1154

Disclosure Date: March 10, 2006 (last updated February 22, 2025)
PHP remote file inclusion vulnerability in archive.php in Fantastic News 2.1.2 allows remote attackers to include arbitrary files via the CONFIG[script_path] variable. NOTE: 2.1.4 was also reported to be vulnerable.
0
0
Attacker Value
Unknown

CVE-2006-0972

Disclosure Date: March 03, 2006 (last updated February 22, 2025)
SQL injection vulnerability in news.php in Tony Baird Fantastic News 2.1.1 allows remote attackers to execute arbitrary SQL commands via the page parameter. NOTE: the category vector is already covered by CVE-2005-3846.
0
0
Attacker Value
Unknown

CVE-2005-3846

Disclosure Date: November 26, 2005 (last updated February 22, 2025)
SQL injection vulnerability in news.php in Fantastic News 2.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter.
0
0