Approved changes feed: RSS · Atom
cpe:2.3:a:powerscripts:powernews:2.5.6:*:*:*:*:*:*:*
part: a version: 2.5.6 update: *
| Vendor | Powerscripts (d7a11c83-6696-5f55-bd8c-e8d80a0e5ad1) |
|---|---|
| Product | Powernews (e7f36adf-6ca7-5f92-94d9-b7094181f459) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-0742 |
vulnerable | 2026-06-08 04:50:17.670266 |
Details available
Multiple directory traversal vulnerabilities in PowerScripts PowerNews 2.5.6 allow remote attackers to read and include arbitrary files via a .. (dot dot) in the (1) subpage parameter in (a) categories.inc.php, (b) news.inc.php, (c) other.inc.php, (d) permissions.inc.php, (e) templates.inc.php, and (f) users.inc.php in pnadmin/; and (2) the page parameter to (g) pnadmin/index.php. NOTE: vector 2 is only exploitable by administrators.
Published: 2008-02-13T01:00:00.000Z
Updated: 2024-08-07T07:54:23.298Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.