GCVE - cpe:2.3:a:vscripts.pl:qlnews:1.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:vscripts.pl:qlnews:1.2:*:*:*:*:*:*:*

part: a version: 1.2 update: *

Vendor	Vscripts.Pl (`49d0f3fb-1ab3-5d66-8bc8-2c9b9bec2d12`)
Product	Qlnews (`42a2c3da-14f4-559d-b0c6-0b65a0f039df`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-1576`	vulnerable	2026-06-08 04:48:57.508604	Details available Direct static code injection vulnerability in QLnews 1.2 allows remote authenticated administrators to execute arbitrary PHP code by modifying config.php. Published: 2006-04-02T21:00:00.000Z Updated: 2024-08-07T17:19:48.355Z Open on db.gcve.eu Reference links http://www.osvdb.org/24291 http://evuln.com/vulns/113/description.html http://www.securityfocus.com/bid/17335 http://secunia.com/advisories/19479 https://exchange.xforce.ibmcloud.com/vulnerabilities/25548	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1575`	vulnerable	2026-06-08 04:48:57.508208	Details available Multiple cross-site scripting (XSS) vulnerabilities in news.php in QLnews 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) autorx and (2) newsx parameters. Published: 2006-04-02T21:00:00.000Z Updated: 2024-08-07T17:19:48.667Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/699 http://evuln.com/vulns/113/description.html http://www.securityfocus.com/bid/17335 https://exchange.xforce.ibmcloud.com/vulnerabilities/25546 http://secunia.com/advisories/19479	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.