Scriptphp Pronews vulnerabilities

• scriptphp pronews admin/change.php in ProNews 1.5 does not check whether a user is permitted to change news items,... CVE-2006-6580 6.4 MediumDecember 15, 2006
• scriptphp pronews SQL injection vulnerability in lire-avis.php in ProNews 1.5 allows remote attackers to execute... CVE-2006-6519 Public exploit 7.5 HighDecember 14, 2006
• scriptphp pronews Multiple cross-site scripting (XSS) vulnerabilities in ProNews 1.5 allow remote attackers to... CVE-2006-6518 Public exploit 6.8 MediumDecember 14, 2006