Newsoffice

newsoffice

Vendor: Newanz • 2 CVEs

CVEs (2)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2010-2844

1Newanz

1Newsoffice

Apr 29, 2026

Jul 25, 2010

N/A· v4

N/A· v3

4.3 MEDIUM· v2

Cross-site scripting (XSS) vulnerability in news_show.php in Newanz NewsOffice 2.0.18 allows remote attackers to inject arbitrary web script or HTML via the n-cat parameter.

CVE-2008-1903

1Newanz

1Newsoffice

Apr 23, 2026

Apr 22, 2008

N/A· v4

N/A· v3

7.5 HIGH· v2

PHP remote file inclusion vulnerability in news_show.php in Newanz NewsOffice 1.0 and 1.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the newsoffice_directory par...Show more