GCVE - cpe:2.3:a:utopia_software:utopia_news

Approved changes feed: RSS · Atom

cpe:2.3:a:utopia_software:utopia_news_pro:1.1.3:*:*:*:*:*:*:*

part: a version: 1.1.3 update: *

Vendor	Utopia Software (`dda7b97e-bceb-5333-9476-a418f5e81807`)
Product	Utopia News Pro (`19602c96-b147-588c-b93d-aa0140e341f7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2005-3201`	not_vulnerable	2026-06-08 04:48:39.873824	Details available SQL injection vulnerability in news.php for Utopia News Pro (UNP) 1.1.3, when magic_quotes_gpc is disabled and register_globals is enabled, allows remote attackers to execute arbitrary SQL via the newsid parameter. Published: 2005-10-14T04:00:00.000Z Updated: 2024-08-07T23:01:59.306Z Open on db.gcve.eu Reference links http://secunia.com/advisories/17115/ http://rgod.altervista.org/utopia113.html http://www.utopiasoftware.net/ http://www.osvdb.org/19942 http://marc.info/?l=bugtraq&m=112872691119874&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3200`	vulnerable	2026-06-08 04:48:39.870963	Details available Multiple cross-site scripting (XSS) vulnerabilities in Utopia News Pro (UNP) 1.1.3 and 1.1.4 allow remote attackers to inject arbitrary web script or HTML via (1) the sitetitle parameter in header.php and (2) the version and (3) query_count parameters in footer.php. Published: 2005-10-14T04:00:00.000Z Updated: 2024-08-07T23:01:59.282Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/22554 http://secunia.com/advisories/17115/ http://rgod.altervista.org/utopia113.html http://www.utopiasoftware.net/ http://marc.info/?l=bugtraq&m=112872691119874&w=2	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.