GCVE - cpe:2.3:a:fscripts:fantastic

Approved changes feed: RSS · Atom

cpe:2.3:a:fscripts:fantastic_news:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Fscripts (`6fc43372-fdd5-5f14-8dc7-477e250f9e5e`)
Product	Fantastic News (`8c93e10e-c343-56b0-bf05-dca1a1d921df`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-4671`	vulnerable	2026-06-08 04:49:18.498406	Details available PHP remote file inclusion vulnerability in headlines.php in Fantastic News 2.1.4, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG[script_path] parameter, a different vector than CVE-2006-1154. Published: 2006-09-11T16:00:00.000Z Updated: 2024-08-07T19:23:40.028Z Open on db.gcve.eu Reference links http://secunia.com/advisories/21807 http://www.vupen.com/english/advisories/2006/3513 http://secunia.com/advisories/23519 https://exchange.xforce.ibmcloud.com/vulnerabilities/31121 https://www.exploit-db.com/exploits/3027	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3846`	vulnerable	2026-06-08 04:48:42.298794	Details available SQL injection vulnerability in news.php in Fantastic News 2.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter. Published: 2005-11-26T22:00:00.000Z Updated: 2024-08-07T23:24:36.502Z Open on db.gcve.eu Reference links http://pridels0.blogspot.com/2005/11/fantastic-news-category-sql-inj.html https://exchange.xforce.ibmcloud.com/vulnerabilities/23215 http://www.osvdb.org/21162 http://www.securityfocus.com/bid/15622 http://www.vupen.com/english/advisories/2005/2595	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.