Ashwebstudio : Security Vulnerabilities, CVEs,
Cross-site scripting (XSS) vulnerability in ashnews.php in Derek Ashauer ashNews 0.83 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
Max CVSS
4.3
EPSS Score
2.94%
Published
2006-02-02
Updated
2017-07-20
PHP remote file include vulnerability in Derek Ashauer ashNews 0.83 allows remote attackers to include and execute arbitrary remote files via a URL in the pathtoashnews parameter to (1) ashnews.php and (2) ashheadlines.php.
Max CVSS
5.0
EPSS Score
3.49%
Published
2003-12-31
Updated
2017-10-11
2 vulnerabilities found