PT-2026-96128

Name of the Vulnerable Software and Affected Versions CuteNews version 2.1.2 Description Deserialization of untrusted data occurs within the cn parse url function. A remote attacker can inject arbitrary values into internal request variables, such as referer, by submitting a crafted base64-encode...