CVE-2006-6580中 6.4admin/change.php in ProNews 1.5 does not check whether a user is permitted to change news items, which allows remote attackers to add or del…
CVE-2006-6518中 6.8Multiple cross-site scripting (XSS) vulnerabilities in ProNews 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1)…