Export limit exceeded: 10159 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2007-0261

snews.php in sNews 1.5.30 and earlier does not properly exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions, as demonstrated by changing an administrative password via the changeup task, and by uploading PHP code via the imagefile parameter.

CVSS 2.0 · 10.0 Critical EPSS 4.8% KEV · Not listed
Vendors
Snews
Products
Snews
CVE-2008-1413

Cross-site scripting (XSS) vulnerability in search.php in SNewsCMS Rus 2.1 through 2.4 allows remote attackers to inject arbitrary web script or HTML via the query parameter.

CVSS 2.0 · 4.3 Medium EPSS 1.5% KEV · Not listed
Vendors
Snews
Products
Snews Cms Rus