GCVE - cpe:2.3:a:planerd.net:p-news:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:planerd.net:p-news:*:*:*:*:*:*:*:*

part: a version: * update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-7114`	vulnerable	2026-06-08 04:49:30.375027	Details available P-News 2.0 stores db/user.txt under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and password hashes via a direct request. NOTE: this might be the same issue as CVE-2006-6888. Published: 2007-03-06T01:00:00.000Z Updated: 2024-08-07T20:50:06.010Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/30578 http://secunia.com/advisories/23103 http://www.vupen.com/english/advisories/2006/4770	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-7113`	vulnerable	2026-06-08 04:49:30.374634	Details available Unrestricted file upload vulnerability in P-News 2.0 allows remote attackers to upload and execute arbitrary files via an avatar file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Published: 2007-03-06T01:00:00.000Z Updated: 2024-08-07T20:50:06.099Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/21344 https://exchange.xforce.ibmcloud.com/vulnerabilities/30579 http://secunia.com/advisories/23103 http://www.vupen.com/english/advisories/2006/4770	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.