Description
Cross-site scripting (XSS) vulnerability in index.php in PsNews 1.1 allows remote attackers to inject arbitrary web script or HTML via the no parameter.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Michal Blaszczak · textwebappsphp
https://www.exploit-db.com/exploits/24575
References (4)
Core 4
Core References
Vendor Advisory vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/11124
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1011191
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/17302
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=109458516524494&w=2
Scores
EPSS
0.0072
EPSS Percentile
72.6%
Details
Status
published
Products (1)
psnews/psnews
1.1
Published
Sep 05, 2004
Tracked Since
Feb 18, 2026