Czaries Network Czarnews — known CVE vulnerabilities

Every CVE whose affected-product data names Czaries Network Czarnews, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2005-0859 — CVSS 7.5 (high): PHP remote file inclusion vulnerability in CzarNews 1.13b allows remote attackers to execute arbitrary PHP code via the tpath parameter to…
• CVE-2006-1641 — CVSS 5.1 (medium): Multiple SQL injection vulnerabilities in CzarNews 1.14 allow remote attackers to execute arbitrary SQL commands via the (1) usern or (2)…
• CVE-2006-3685 — CVSS 5.1 (medium): PHP remote file inclusion vulnerability in CzarNews 1.12 through 1.14 allows remote attackers to execute arbitrary PHP code via a URL in…
• CVE-2006-1640 — CVSS 2.6 (low): Cross-site scripting (XSS) vulnerability in news.php in CzarNews 1.14 allows remote attackers to inject arbitrary web script or HTML via…