CVE-2009-4113

CVE-2009-4113 affects CuteNews/CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b. The vulnerability is a static code injection in the Categories module that allows remote authenticated users with administrative privileges to inject arbitrary PHP code into data/category.db.php via the Category A...

CVE-2009-4113

Static code injection vulnerability in the Categories module in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote authenticated users with application administrative privileges to inject arbitrary PHP code into data/category.db.php via the Category Access field...

CuteNews and UTF-8 CuteNews - Multiple Vulnerabilities

CuteNews and UTF-8 CuteNews - Multiple Vulnerabilities MorningStar Security - Advisory http://www.morningstarsecurity.com/ Multiple security issues in Cute News and UTF-8 Cute News 1. Advisory Information...

CuteNews and UTF-8 CuteNews Multiple Security Vulnerabilities

Exploit for unknown platform in category web applications ============================================================= CuteNews and UTF-8 CuteNews Multiple Security Vulnerabilities ============================================================= Multiple security issues in Cute News and UTF-8 Cute...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in CutePHP CuteNews 1.3.6 allow remote attackers to execute arbitrary PHP code via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: issue might overlap...

CVE-2007-1153

CVE-2007-1153 concerns CuteNews 1.3.x (notably 1.3.6) with multiple PHP remote file inclusion vulnerabilities in CuteNews/CutePHP. The root cause is improper handling of user-controllable inputs, enabling remote attackers to cause arbitrary PHP code execution via unspecified vectors; related CVEs...

CuteNews 1.4.1 Multiple vulnerabilities

/ --------------------------------------------------------------- Neo Security Team NST® Advisory 20 --------------------------------------------------------------- Program : CuteNews 1.4.1 Homepage: http://www.cutephp.com Vulnerable Versions: CuteNews 1.4.1 & lower ones Risk: Medium! Impact: Cro...

CutePHP CuteNews 1.4.1 Editnews Module - Cross-Site Scripting

source: https://www.securityfocus.com/bid/17592/info CuteNews is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of ...

cuteNewsExec.txt

There is a vulnerability in the latest and to the best of my knowledge, all prior versions of CuteNews from CutePHP.com. CuteNews does not properly sanitize user input when an administrative account edits the template files. CuteNews takes HTML code from a web form and outputs it to a template fi...

PHP Execution Vulnerability in CuteNews

There is a vulnerability in the latest and to the best of my knowledge, all prior versions of CuteNews from CutePHP.com. CuteNews does not properly sanitize user input when an administrative account edits the template files. CuteNews takes HTML code from a web form and outputs it to a template fi...

CutePHP CuteNews 1.3.6 - x-forwarded-for Script Injection

CutePHP CuteNews 1.3.6 - x-forwarded-for Script Injection source: https://www.securityfocus.com/bid/12691/info A remote script injection vulnerability affects CutePHP CuteNews. This issue is due to a failure of the application to properly sanitize user-supplied input prior to using it to carry ou...

CutePHP CuteNews 1.3.6 - 'x-forwarded-for' Script Injection

source: https://www.securityfocus.com/bid/12691/info A remote script injection vulnerability affects CutePHP CuteNews. This issue is due to a failure of the application to properly sanitize user-supplied input prior to using it to carry out critical functionality. An attacker may leverage this...

[Full-Disclosure] Cross-Site Scripting CuteNews

http://www.swp-zone.org/archivos/advisory-06.txt ------------------------------------------------------------------------------------------------- :.: Cross-Site Scripting CuteNews :.: PROGRAM: CuteNews HOMEPAGE: http://cutephp.com/ VERSION: v1.3.1 BUG: Cross-Site Scripting DATE: 23/05/2004 AUTHO...

CutePHP CuteNews 1.3 - HTML Injection

CutePHP CuteNews 1.3 - HTML Injection source: https://www.securityfocus.com/bid/8060/info CutePHP is prone to HTML injection attacks. The vulnerability exists due to insufficient sanitization of user-supplied input. Specifically, user-supplied input to news posts are not sufficiently sanitized of...

CutePHP CuteNews 1.3 - HTML Injection

source: https://www.securityfocus.com/bid/8060/info CutePHP is prone to HTML injection attacks. The vulnerability exists due to insufficient sanitization of user-supplied input. Specifically, user-supplied input to news posts are not sufficiently sanitized of malicious HTML code...