← Back

Stylemotion

stylemotion

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Web News
web_news
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2005-2897
1Stylemotion
1Web News
Apr 16, 2026
Sep 14, 2005
N/A· v4
N/A· v3
5.0 MEDIUM· v2
WEB//NEWS 1.4 allows remote attackers to obtain sensitive information via a direct request to files in the actions directory, which reveal the path in an error message, as demonstrated using cat.add.php.
CVE-2005-2896
1Stylemotion
1Web News
Apr 16, 2026
Sep 14, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in WEB//NEWS 1.4 allows remote attackers to execute arbitrary SQL commands via the (1) wn_userpw parameter to startup.php, (2) cat, (3) id, or (4) stof parameter to news.php, or (5) id paramet...Show more
SQL injection vulnerability in WEB//NEWS 1.4 allows remote attackers to execute arbitrary SQL commands via the (1) wn_userpw parameter to startup.php, (2) cat, (3) id, or (4) stof parameter to news.php, or (5) id parameter to print.php.Show less