GCVE - cpe:2.3:a:code-projects:news-buzz:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:news-buzz:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Code Projects (`a64d3912-7513-5560-97cf-6216c4da48a5`)
Product	News Buzz (`cf3e9877-adc9-5b31-a277-876f00aa0cee`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-5633`	vulnerable	2026-06-08 07:37:25.362349	code-projects/anirbandutta9 Content Management System/News-Buzz users.php sql injection MEDIUM (6.3) A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/users.php. The manipulation of the argument delete leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-05T03:31:04.853Z Updated: 2025-06-05T14:09:04.121Z Open on db.gcve.eu Reference links https://vuldb.com/?id.311120 https://vuldb.com/?ctiid.311120 https://vuldb.com/?submit.589783 https://github.com/YZS17/CVE/blob/main/NEWS-BUZZ/sqli_users.php_delete.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-5632`	vulnerable	2026-06-08 07:37:25.361551	code-projects/anirbandutta9 Content Management System/News-Buzz users.php sql injection MEDIUM (6.3) A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/users.php. The manipulation of the argument change_to_admin leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-05T03:00:10.612Z Updated: 2025-06-05T14:09:10.416Z Open on db.gcve.eu Reference links https://vuldb.com/?id.311119 https://vuldb.com/?ctiid.311119 https://vuldb.com/?submit.589781 https://github.com/YZS17/CVE/blob/main/NEWS-BUZZ/sqli_users.php_change_to_admin.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-5631`	vulnerable	2026-06-08 07:37:25.356758	code-projects/anirbandutta9 Content Management System/News-Buzz publicposts.php sql injection HIGH (7.3) A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been classified as critical. Affected is an unknown function of the file /publicposts.php. The manipulation of the argument post leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-05T02:31:05.107Z Updated: 2025-06-05T14:09:25.990Z Open on db.gcve.eu Reference links https://vuldb.com/?id.311118 https://vuldb.com/?ctiid.311118 https://vuldb.com/?submit.589780 https://github.com/YZS17/CVE/blob/main/NEWS-BUZZ/sqli_publicposts.php_post.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-15197`	vulnerable	2026-06-08 07:06:35.865748	code-projects/anirbandutta9 Content Management System/News-Buzz editposts.php unrestricted upload MEDIUM (4.7) A security flaw has been discovered in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. This vulnerability affects unknown code of the file /admin/editposts.php. Performing manipulation of the argument image results in unrestricted upload. The attack may be initiated remotely. The exploit has been released to the public and may be exploited. Published: 2025-12-29T17:02:06.458Z Updated: 2025-12-30T15:58:27.509Z Open on db.gcve.eu Reference links https://vuldb.com/?id.338584 https://vuldb.com/?ctiid.338584 https://vuldb.com/?submit.724721 https://github.com/Limingqian123/CVE/issues/7	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10758`	vulnerable	2026-06-08 06:23:47.454163	code-projects/anirbandutta9 Content Management System/News-Buzz index.php sql injection HIGH (7.3) A vulnerability, which was classified as critical, was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument user_name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product is distributed under two entirely different names. Published: 2024-11-04T03:31:04.265Z Updated: 2024-11-04T17:01:46.227Z Open on db.gcve.eu Reference links https://vuldb.com/?id.282927 https://vuldb.com/?ctiid.282927 https://vuldb.com/?submit.436395 https://github.com/EmilGallajov/zero-day/blob/main/content_management_system_sqli.md	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.