Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2007-5370 1 Netwin 1 Dnewsweb 2025-04-09 N/A
Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/dnewsweb.exe in NetWin DNewsWeb (DNews News Server) 57e1 allow remote attackers to inject arbitrary web script or HTML via the (1) group or (2) utag parameter.
CVE-2000-0423 1 Netwin 1 Dnews 2025-04-03 N/A
Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd, and utag.