h4cky

3 exploits Active since Aug 2005
CVE-2005-2638 EXPLOITDB text WORKING POC
PHPFreeNews 1.40 - Cross-Site Scripting via NewsMode or Match Parameter
Multiple cross-site scripting (XSS) vulnerabilities in PHPFreeNews 1.40 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) NewsMode parameter to NewsCategoryForm.php, or the (2) Match or (3) NewsMode parameter to SearchResults.php.
CVE-2005-2638 EXPLOITDB text WORKING POC
PHPFreeNews 1.40 - Cross-Site Scripting via NewsMode or Match Parameter
Multiple cross-site scripting (XSS) vulnerabilities in PHPFreeNews 1.40 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) NewsMode parameter to NewsCategoryForm.php, or the (2) Match or (3) NewsMode parameter to SearchResults.php.
CVE-2005-2637 EXPLOITDB text WRITEUP
phpfreenews < 1.40 - SQL Injection via Match, CatID, or Password Parameter
Multiple SQL injection vulnerabilities in PHPFreeNews 1.40 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) Match or (2) CatID parameter to SearchResults.php, or (3) the password to AccessControl.php.