Cutephp vulnerabilities

Products

• Cutenews 38

Newest

• cutephp cutenews CuteNews 2.0.1 allows remote authenticated attackers to execute arbitrary PHP code via... CVE-2020-5558 8.8 HighMarch 25, 2020
• cutephp cutenews Cross-site scripting vulnerability in CuteNews 2.0.1 allows remote attackers to inject arbitrary... CVE-2020-5557 6.1 MediumMarch 25, 2020
• cutephp cutenews An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through... CVE-2019-11447 Public exploit EPSS 52.6% 8.8 HighApril 22, 2019
• cutephp cutenews, korn19 utf-8 cutenews +1 more Multiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews... CVE-2009-4250 Public exploit 4.3 MediumDecember 10, 2009
• cutephp cutenews Multiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6, when... CVE-2009-4249 Public exploit 2.6 LowDecember 10, 2009
• cutephp cutenews, korn19 utf-8 cutenews +1 more CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote attackers to obtain sensitive... CVE-2009-4175 Public exploit 5.0 MediumDecember 2, 2009
• cutephp cutenews, korn19 utf-8 cutenews +1 more The editnews module in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b, when magic_quotes_gpc... CVE-2009-4174 Public exploit 6.0 MediumDecember 2, 2009
• cutephp cutenews, korn19 utf-8 cutenews +1 more Cross-site request forgery (CSRF) vulnerability in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews... CVE-2009-4173 Public exploit 6.8 MediumDecember 2, 2009
• cutephp cutenews, korn19 utf-8 cutenews +1 more Cross-site scripting (XSS) vulnerability in index.php in CutePHP CuteNews 1.4.6 and UTF-8... CVE-2009-4172 Public exploit 2.6 LowDecember 2, 2009
• cutephp cutenews Multiple directory traversal vulnerabilities in CutePHP CuteNews 1.4.6, when magic_quotes_gpc is... CVE-2009-4116 3.5 LowNovember 30, 2009
• cutephp cutenews Multiple static code injection vulnerabilities in the Categories module in CutePHP CuteNews 1.4.6... CVE-2009-4115 Public exploit 6.5 MediumNovember 30, 2009
• cutephp cutenews, korn19 utf-8 cutenews +1 more Static code injection vulnerability in the Categories module in CutePHP CuteNews 1.4.6 and UTF-8... CVE-2009-4113 6.5 MediumNovember 30, 2009
• cutephp cutenews plugins/wacko/highlight/html.php in Strawberry in CuteNews.ru 1.1.1 (aka Strawberry) allows... CVE-2008-4557 Public exploit EPSS 45.3% 10.0 HighOctober 14, 2008
• cutephp cutenews Directory traversal vulnerability in file.php in CuteNews 2.6 allows remote attackers to read... CVE-2007-6662 5.8 MediumJanuary 4, 2008
• cutephp cutenews Multiple PHP remote file inclusion vulnerabilities in CutePHP CuteNews 1.3.6 allow remote... CVE-2007-1153 7.5 HighFebruary 27, 2007
• cutephp cutenews Cross-site scripting (XSS) vulnerability in CuteNews 1.3.6 allows remote attackers to inject... CVE-2006-6300 Public exploit 4.3 MediumDecember 5, 2006
• cutephp cutenews ** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in CuteNews 1.3.x allow remote... CVE-2006-4445 Disputed 7.5 HighAugust 29, 2006
• cutephp cutenews Cross-site scripting (XSS) vulnerability in Index.PHP in CuteNews 1.4.5 allows remote attackers... CVE-2006-3661 2.6 LowJuly 17, 2006
• cutephp cutenews CuteNews 1.4.1 allows remote attackers to obtain sensitive information via a direct request to (1... CVE-2006-2250 6.4 MediumMay 9, 2006
• cutephp cutenews Multiple cross-site scripting (XSS) vulnerabilities in search.php in CuteNews 1.4.1 and earlier,... CVE-2006-2249 Public exploit 4.3 MediumMay 9, 2006
• cutephp cutenews Directory traversal vulnerability in the editnews module (inc/editnews.mdu) in index.php in... CVE-2006-1925 Public exploit 4.3 MediumApril 20, 2006
• cutephp cutenews CuteNews 1.4.1 and possibly other versions allows remote attackers to obtain the installation... CVE-2006-1340 5.0 MediumMarch 21, 2006
• cutephp cutenews Directory traversal vulnerability in inc/functions.inc.php in CuteNews 1.4.1 and possibly other... CVE-2006-1339 5.0 MediumMarch 21, 2006
• cutephp cutenews Cross-site scripting (XSS) vulnerability in CuteNews 1.4.1 allows remote attackers to inject... CVE-2006-1121 Public exploit 6.8 MediumMarch 9, 2006
• cutephp cutenews Cross-site scripting (XSS) vulnerability in show_news.php in CuteNews 1.4.1 allows remote... CVE-2006-0885 Public exploit 4.3 MediumFebruary 25, 2006
• cutephp cutenews index.php CuteNews 1.4.0 and earlier allows remote attackers to obtain the path of the... CVE-2005-3592 5.0 MediumNovember 16, 2005
• cutephp cutenews Directory traversal vulnerability in CuteNews 1.4.1 allows remote attackers to include arbitrary... CVE-2005-3507 Public exploit EPSS 12.4% 5.0 MediumNovember 6, 2005
• cutephp cutenews Direct static code injection vulnerability in the flood protection feature in inc/shows.inc.php... CVE-2005-3010 Public exploit 7.5 HighSeptember 21, 2005
• cutephp cutenews Cross-site scripting (XSS) vulnerability in CuteNews allows remote attackers to inject arbitrary... CVE-2005-3009 4.3 MediumSeptember 21, 2005
• cutephp cutenews show_news.php in CuteNews 1.3.6 allows remote attackers to obtain the full path of the server via... CVE-2005-2394 5.0 MediumJuly 27, 2005
• cutephp cutenews Cross-site scripting (XSS) vulnerability in CuteNews 1.3.6 allows remote attackers to inject... CVE-2005-2393 4.3 MediumJuly 27, 2005
• cutephp cutenews Direct code injection vulnerability in CuteNews 1.3.6 and earlier allows remote attackers with... CVE-2005-1876 4.4 MediumJune 7, 2005
• cutephp cutenews The documentation for CuteNews 1.3.6 and possibly other versions specifies that files under... CVE-2004-2615 4.6 MediumDecember 31, 2004
• aj-fork, cutephp cutenews +1 more The documentation for AJ-Fork 167 implies that users should set permissions for users.db.php to... CVE-2004-1573 7.2 HighDecember 31, 2004
• cutephp cutenews Cross-site scripting (XSS) vulnerability in index.php in CuteNews 1.3.6 and earlier allows remote... CVE-2004-1659 Public exploit 4.3 MediumSeptember 2, 2004
• cutephp cutenews PHP remote file inclusion vulnerability in CuteNews 1.3.6 and earlier allows remote attackers to... CVE-2004-1660 7.5 HighAugust 30, 2004
• cutephp cutenews Cross-site scripting (XSS) vulnerability in (1) show_archives.php, (2) show_news.php, and... CVE-2004-0660 Public exploit 6.8 MediumJuly 13, 2004
• cutephp cutenews PHP remote file inclusion vulnerability in CuteNews 0.88 allows remote attackers to execute... CVE-2003-1240 Public exploit 7.5 HighDecember 31, 2003