Php Arena Panews vulnerabilities

• php arena panews admin_setup.php in paNews 2.0.4b allows remote attackers to inject arbitrary PHP code via the (1)... CVE-2005-0647 Public exploit 5.0 MediumMarch 4, 2005
• php arena panews SQL injection vulnerability in auth.php in paNews 2.0.4b allows remote attackers to execute... CVE-2005-0646 7.5 HighMarch 4, 2005