Every CVE whose affected-product data names Vscripts.pl Qlnews, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (2)
CVE-2006-1576 — CVSS 7.5 (high): Direct static code injection vulnerability in QLnews 1.2 allows remote authenticated administrators to execute arbitrary PHP code by…
CVE-2006-1575 — CVSS 6.8 (medium): Multiple cross-site scripting (XSS) vulnerabilities in news.php in QLnews 1.2 allow remote attackers to inject arbitrary web script or HTML…