← Back

Planerd.net

planerd.net

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
P News
p-news
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2006-7114
1Planerd.net
1P News
Apr 23, 2026
Mar 6, 2007
N/A· v4
N/A· v3
5.0 MEDIUM· v2
P-News 2.0 stores db/user.txt under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and password hashes via a direct request. NOTE:...Show more
P-News 2.0 stores db/user.txt under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and password hashes via a direct request. NOTE: this might be the same issue as CVE-2006-6888.Show less
CVE-2006-7113
1Planerd.net
1P News
Apr 23, 2026
Mar 6, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
Unrestricted file upload vulnerability in P-News 2.0 allows remote attackers to upload and execute arbitrary files via an avatar file. NOTE: the provenance of this information is unknown; the details are obtained solely...Show more
Unrestricted file upload vulnerability in P-News 2.0 allows remote attackers to upload and execute arbitrary files via an avatar file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.Show less