← Back

Magic News Lite

magic_news_lite

Vendor: Reamday Enterprises • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2006-0724
1Reamday Enterprises
1Magic News Lite
Apr 16, 2026
Feb 16, 2006
N/A· v4
N/A· v3
2.6 LOW· v2
profile.php in Reamday Enterprises Magic News Lite 1.2.3, when register_globals is enabled, allows remote attackers to modify program behavior, potentially bypassing authentication controls, via modified (1) action, (2)...Show more
profile.php in Reamday Enterprises Magic News Lite 1.2.3, when register_globals is enabled, allows remote attackers to modify program behavior, potentially bypassing authentication controls, via modified (1) action, (2) passwd, (3) admin_password, (4) new_passwd, and (5) confirm_passwd variables, which are not initialized.Show less
CVE-2006-0723
1Reamday Enterprises
1Magic News Lite
Apr 16, 2026
Feb 16, 2006
N/A· v4
N/A· v3
2.6 LOW· v2
PHP remote file inclusion vulnerability in preview.php in Reamday Enterprises Magic News Lite 1.2.3, when register_globals is enabled, allows remote attackers to include arbitrary files via a URL in the php_script_path p...Show more
PHP remote file inclusion vulnerability in preview.php in Reamday Enterprises Magic News Lite 1.2.3, when register_globals is enabled, allows remote attackers to include arbitrary files via a URL in the php_script_path parameter.Show less