GCVE - cpe:2.3:a:anirbandutta9:news-buzz:1.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:anirbandutta9:news-buzz:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

Vendor	Anirbandutta9 (`fe7833fa-208a-5ae8-8111-37e38d04cd0a`)
Product	News Buzz (`2f9a9731-09c3-556a-8c77-da9c9f636610`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/anirbandutta9/news-buzz`	purl2cpe	2026-06-01 10:13:08.768899

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-5633`	vulnerable	2026-06-08 07:37:25.362666	code-projects/anirbandutta9 Content Management System/News-Buzz users.php sql injection MEDIUM (6.3) A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/users.php. The manipulation of the argument delete leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-05T03:31:04.853Z Updated: 2025-06-05T14:09:04.121Z Open on db.gcve.eu Reference links https://vuldb.com/?id.311120 https://vuldb.com/?ctiid.311120 https://vuldb.com/?submit.589783 https://github.com/YZS17/CVE/blob/main/NEWS-BUZZ/sqli_users.php_delete.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-5632`	vulnerable	2026-06-08 07:37:25.361786	code-projects/anirbandutta9 Content Management System/News-Buzz users.php sql injection MEDIUM (6.3) A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/users.php. The manipulation of the argument change_to_admin leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-05T03:00:10.612Z Updated: 2025-06-05T14:09:10.416Z Open on db.gcve.eu Reference links https://vuldb.com/?id.311119 https://vuldb.com/?ctiid.311119 https://vuldb.com/?submit.589781 https://github.com/YZS17/CVE/blob/main/NEWS-BUZZ/sqli_users.php_change_to_admin.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-5631`	vulnerable	2026-06-08 07:37:25.359827	code-projects/anirbandutta9 Content Management System/News-Buzz publicposts.php sql injection HIGH (7.3) A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been classified as critical. Affected is an unknown function of the file /publicposts.php. The manipulation of the argument post leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-05T02:31:05.107Z Updated: 2025-06-05T14:09:25.990Z Open on db.gcve.eu Reference links https://vuldb.com/?id.311118 https://vuldb.com/?ctiid.311118 https://vuldb.com/?submit.589780 https://github.com/YZS17/CVE/blob/main/NEWS-BUZZ/sqli_publicposts.php_post.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10758`	vulnerable	2026-06-08 06:23:47.457683	code-projects/anirbandutta9 Content Management System/News-Buzz index.php sql injection HIGH (7.3) A vulnerability, which was classified as critical, was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument user_name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product is distributed under two entirely different names. Published: 2024-11-04T03:31:04.265Z Updated: 2024-11-04T17:01:46.227Z Open on db.gcve.eu Reference links https://vuldb.com/?id.282927 https://vuldb.com/?ctiid.282927 https://vuldb.com/?submit.436395 https://github.com/EmilGallajov/zero-day/blob/main/content_management_system_sqli.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-38913`	vulnerable	2026-06-08 06:08:19.134990	Details available SQL injection vulnerability in anirbandutta9 NEWS-BUZZ v.1.0 allows a remote attacker to execute arbitrary code via a crafted script. Published: 2025-12-15T00:00:00.000Z Updated: 2025-12-15T21:09:18.867Z Open on db.gcve.eu Reference links https://github.com/ThuanNguyen115685/Report/blob/main/sqlinjection.md https://gist.github.com/nguyenkhanhthuan/03ce706686508b14506d38788c754dfb	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.