Approved changes feed: RSS · Atom

cpe:2.3:a:phpnews:phpnews:1.2.3:*:*:*:*:*:*:*

part: a version: 1.2.3 update: *

VendorPhpnews (889b1572-f55c-517d-b9a1-949b3f8a9df5)
ProductPhpnews (339a7a0c-7251-597a-af92-6e1e78edee47)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:sourceforge/newsphp purl2cpe 2026-06-01 10:12:37.147807

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-0632 vulnerable 2026-06-08 04:48:13.210960 Details available
PHP remote file inclusion vulnerability in auth.php in PHPNews 1.2.4 and possibly 1.2.3, allows remote attackers to execute arbitrary PHP code via the path parameter.
Published: 2005-03-04T05:00:00.000Z
Updated: 2024-08-07T21:21:06.494Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2474 vulnerable 2026-06-08 04:48:09.841676 Details available
SQL injection vulnerability in PHPNews 1.2.3 allows remote attackers to execute arbitrary SQL commands via the mid parameter to sendtofriend.php.
Published: 2005-08-20T04:00:00.000Z
Updated: 2024-08-08T01:29:13.858Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.