Approved changes feed: RSS · Atom

cpe:2.3:a:phpnews:phpnews:1.2.5:*:*:*:*:*:*:*

part: a version: 1.2.5 update: *

VendorPhpnews (889b1572-f55c-517d-b9a1-949b3f8a9df5)
ProductPhpnews (339a7a0c-7251-597a-af92-6e1e78edee47)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:sourceforge/newsphp purl2cpe 2026-06-01 10:12:37.149424

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-2383 vulnerable 2026-06-08 04:48:29.168335 Details available
SQL injection vulnerability in auth.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via the user parameter in an HTTP POST request.
Published: 2005-07-26T04:00:00.000Z
Updated: 2024-08-07T22:22:49.032Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2156 vulnerable 2026-06-08 04:48:28.535043 Details available
SQL injection vulnerability in news.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via the prevnext parameter.
Published: 2005-07-06T04:00:00.000Z
Updated: 2024-08-07T22:15:37.654Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.