CVE-2006-4768

no score yetEPSS 1.4%

stefan ernst newsscript: no CVSS score yet. EPSS 1.4% chance of exploitation in the next 30 days.

Multiple direct static code injection vulnerabilities in add_go.php in Stefan Ernst Newsscript (aka WM-News) 0.5 beta allow remote attackers to execute arbitrary PHP code via the (1) description, (2) issue, (3) title, (4) var, (5) name, (6) keywords, and (7) note parameters, which are stored in an article file. NOTE: the original source of this vulnerability is unknown; the details are obtained from third party information and CVE post-disclosure analysis.

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
Published: 2006-09-13
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

stefan_ernst:newsscript

References

http://secunia.com/advisories/21826
http://www.osvdb.org/28814
http://www.securityfocus.com/bid/84155
http://www.vupen.com/english/advisories/2006/3558
https://exchange.xforce.ibmcloud.com/vulnerabilities/28900

Check your stack JSON