Skip to content

Cutephp Cutenews vulnerabilities

cutephp cutenewsCuteNews 2.0.1 allows remote authenticated attackers to execute arbitrary PHP code via...CVE-2020-55588.8 HighMarch 25, 2020
cutephp cutenewsCross-site scripting vulnerability in CuteNews 2.0.1 allows remote attackers to inject arbitrary...CVE-2020-55576.1 MediumMarch 25, 2020
cutephp cutenewsAn issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through...CVE-2019-11447Public exploitEPSS 52.6%8.8 HighApril 22, 2019
cutephp cutenews, korn19 utf-8 cutenews +1 moreMultiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews...CVE-2009-4250Public exploit4.3 MediumDecember 10, 2009
cutephp cutenewsMultiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6, when...CVE-2009-4249Public exploit2.6 LowDecember 10, 2009
cutephp cutenews, korn19 utf-8 cutenews +1 moreCutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote attackers to obtain sensitive...CVE-2009-4175Public exploit5.0 MediumDecember 2, 2009
cutephp cutenews, korn19 utf-8 cutenews +1 moreThe editnews module in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b, when magic_quotes_gpc...CVE-2009-4174Public exploit6.0 MediumDecember 2, 2009
cutephp cutenews, korn19 utf-8 cutenews +1 moreCross-site request forgery (CSRF) vulnerability in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews...CVE-2009-4173Public exploit6.8 MediumDecember 2, 2009
cutephp cutenews, korn19 utf-8 cutenews +1 moreCross-site scripting (XSS) vulnerability in index.php in CutePHP CuteNews 1.4.6 and UTF-8...CVE-2009-4172Public exploit2.6 LowDecember 2, 2009
cutephp cutenewsMultiple directory traversal vulnerabilities in CutePHP CuteNews 1.4.6, when magic_quotes_gpc is...CVE-2009-41163.5 LowNovember 30, 2009
cutephp cutenewsMultiple static code injection vulnerabilities in the Categories module in CutePHP CuteNews 1.4.6...CVE-2009-4115Public exploit6.5 MediumNovember 30, 2009
cutephp cutenews, korn19 utf-8 cutenews +1 moreStatic code injection vulnerability in the Categories module in CutePHP CuteNews 1.4.6 and UTF-8...CVE-2009-41136.5 MediumNovember 30, 2009
cutephp cutenewsplugins/wacko/highlight/html.php in Strawberry in CuteNews.ru 1.1.1 (aka Strawberry) allows...CVE-2008-4557Public exploitEPSS 45.3%10.0 HighOctober 14, 2008
cutephp cutenewsDirectory traversal vulnerability in file.php in CuteNews 2.6 allows remote attackers to read...CVE-2007-66625.8 MediumJanuary 4, 2008
cutephp cutenewsMultiple PHP remote file inclusion vulnerabilities in CutePHP CuteNews 1.3.6 allow remote...CVE-2007-11537.5 HighFebruary 27, 2007
cutephp cutenewsCross-site scripting (XSS) vulnerability in CuteNews 1.3.6 allows remote attackers to inject...CVE-2006-6300Public exploit4.3 MediumDecember 5, 2006
cutephp cutenews** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in CuteNews 1.3.x allow remote...CVE-2006-4445Disputed7.5 HighAugust 29, 2006
cutephp cutenewsCross-site scripting (XSS) vulnerability in Index.PHP in CuteNews 1.4.5 allows remote attackers...CVE-2006-36612.6 LowJuly 17, 2006
cutephp cutenewsCuteNews 1.4.1 allows remote attackers to obtain sensitive information via a direct request to (1...CVE-2006-22506.4 MediumMay 9, 2006
cutephp cutenewsMultiple cross-site scripting (XSS) vulnerabilities in search.php in CuteNews 1.4.1 and earlier,...CVE-2006-2249Public exploit4.3 MediumMay 9, 2006
cutephp cutenewsDirectory traversal vulnerability in the editnews module (inc/editnews.mdu) in index.php in...CVE-2006-1925Public exploit4.3 MediumApril 20, 2006
cutephp cutenewsCuteNews 1.4.1 and possibly other versions allows remote attackers to obtain the installation...CVE-2006-13405.0 MediumMarch 21, 2006
cutephp cutenewsDirectory traversal vulnerability in inc/functions.inc.php in CuteNews 1.4.1 and possibly other...CVE-2006-13395.0 MediumMarch 21, 2006
cutephp cutenewsCross-site scripting (XSS) vulnerability in CuteNews 1.4.1 allows remote attackers to inject...CVE-2006-1121Public exploit6.8 MediumMarch 9, 2006
cutephp cutenewsCross-site scripting (XSS) vulnerability in show_news.php in CuteNews 1.4.1 allows remote...CVE-2006-0885Public exploit4.3 MediumFebruary 25, 2006
cutephp cutenewsindex.php CuteNews 1.4.0 and earlier allows remote attackers to obtain the path of the...CVE-2005-35925.0 MediumNovember 16, 2005
cutephp cutenewsDirectory traversal vulnerability in CuteNews 1.4.1 allows remote attackers to include arbitrary...CVE-2005-3507Public exploitEPSS 12.4%5.0 MediumNovember 6, 2005
cutephp cutenewsDirect static code injection vulnerability in the flood protection feature in inc/shows.inc.php...CVE-2005-3010Public exploit7.5 HighSeptember 21, 2005
cutephp cutenewsCross-site scripting (XSS) vulnerability in CuteNews allows remote attackers to inject arbitrary...CVE-2005-30094.3 MediumSeptember 21, 2005
cutephp cutenewsshow_news.php in CuteNews 1.3.6 allows remote attackers to obtain the full path of the server via...CVE-2005-23945.0 MediumJuly 27, 2005
cutephp cutenewsCross-site scripting (XSS) vulnerability in CuteNews 1.3.6 allows remote attackers to inject...CVE-2005-23934.3 MediumJuly 27, 2005
cutephp cutenewsDirect code injection vulnerability in CuteNews 1.3.6 and earlier allows remote attackers with...CVE-2005-18764.4 MediumJune 7, 2005
cutephp cutenewsThe documentation for CuteNews 1.3.6 and possibly other versions specifies that files under...CVE-2004-26154.6 MediumDecember 31, 2004
aj-fork, cutephp cutenews +1 moreThe documentation for AJ-Fork 167 implies that users should set permissions for users.db.php to...CVE-2004-15737.2 HighDecember 31, 2004
cutephp cutenewsCross-site scripting (XSS) vulnerability in index.php in CuteNews 1.3.6 and earlier allows remote...CVE-2004-1659Public exploit4.3 MediumSeptember 2, 2004
cutephp cutenewsPHP remote file inclusion vulnerability in CuteNews 1.3.6 and earlier allows remote attackers to...CVE-2004-16607.5 HighAugust 30, 2004
cutephp cutenewsCross-site scripting (XSS) vulnerability in (1) show_archives.php, (2) show_news.php, and...CVE-2004-0660Public exploit6.8 MediumJuly 13, 2004
cutephp cutenewsPHP remote file inclusion vulnerability in CuteNews 0.88 allows remote attackers to execute...CVE-2003-1240Public exploit7.5 HighDecember 31, 2003