Approved changes feed: RSS · Atom

cpe:2.3:a:corenews:corenews:2.0.1:*:*:*:*:*:*:*

part: a version: 2.0.1 update: *

VendorCorenews (9dfe27bc-2e10-55b4-b9e9-0affeb124e59)
ProductCorenews (ae7d56cd-d12f-53a0-a423-f0ee5f54cbdb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-2033 vulnerable 2026-06-08 04:48:58.663664 Details available
PHP remote file inclusion vulnerability in Core CoreNews 2.0.1 and earlier allows remote authenticated users to execute arbitrary commands via the show parameter. NOTE: this is a different vector than CVE-2006-1212, although it might be the same primary issue.
Published: 2006-04-26T00:00:00.000Z
Updated: 2024-08-07T17:35:31.171Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1212 vulnerable 2026-06-08 04:48:56.527681 Details available
Unspecified vulnerability in index.php in Core CoreNews 2.0.1 allows remote attackers to execute arbitrary commands via the page parameter, possibly due to a PHP remote file include vulnerability. NOTE: this vulnerability could not be confirmed by source code inspection of CoreNews 2.0.1, which does not appear to use a "page" parameter or variable.
Published: 2006-03-14T01:00:00.000Z
Updated: 2024-08-07T17:03:28.476Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.