Approved changes feed: RSS · Atom

cpe:2.3:a:netwin:webnews:1.1j:*:*:*:*:*:*:*

part: a version: 1.1j update: *

VendorNetwin (84440f9c-0c8f-54f6-a00b-4d1ca5722029)
ProductWebnews (ec2f700d-dcbe-5cd8-8061-f8e24fd44e36)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-5100 vulnerable 2026-06-08 04:49:19.674818 Details available
PHP remote file inclusion vulnerability in parse/parser.php in WEB//NEWS (aka webnews) 1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the WN_BASEDIR parameter.
Published: 2006-10-02T20:00:00.000Z
Updated: 2024-08-07T19:41:04.339Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0310 vulnerable 2026-06-08 04:46:21.172482 Details available
Netwin WebNews 1.1k CGI program includes several default usernames and cleartext passwords that cannot be deleted by the administrator, which allows remote attackers to gain privileges via the username/password combinations (1) testweb/newstest, (2) alwn3845/imaptest, (3) alwi3845/wtest3452, or (4) testweb2/wtest4879.
Published: 2002-05-03T04:00:00.000Z
Updated: 2024-08-08T02:42:29.185Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0290 vulnerable 2026-06-08 04:46:21.142301 Details available
Buffer overflow in Netwin WebNews CGI program 1.1, Webnews.exe, allows remote attackers to execute arbitrary code via a long group argument.
Published: 2003-04-02T05:00:00.000Z
Updated: 2024-08-08T02:42:29.000Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.