← Back

Web Content Management News System

web_content_management_news_system

Vendor: Web Content Management • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Web Content Management
1Web Content Management News System
Apr 16, 2026
Aug 7, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
Web Content Management News System allows remote attackers to create arbitrary accounts and gain privileges via a direct request to Admin/Users/AddModifyInput.php.
1Web Content Management
1Web Content Management News System
Apr 16, 2026
Aug 7, 2005
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in Web Content Management News System allows remote attackers to inject arbitrary web script or HTML via (1) the strRootpath parameter to validsession.php or (2) the strTable para...Show more
Cross-site scripting (XSS) vulnerability in Web Content Management News System allows remote attackers to inject arbitrary web script or HTML via (1) the strRootpath parameter to validsession.php or (2) the strTable parameter to Admin/News/List.php.Show less