6 matches found
PT-2026-96126
Name of the Vulnerable Software and Affected Versions CuteNews version 2.1.2 Description Server-Side Request Forgery SSRF exists in the Media Manager's "Upload by URL" functionality. The issue is located in the upload from inet function within the core/modules/media.php file. Recommendations As a...
CVE-2026-36469
CuteNews v.2.1.2 is vulnerable to Server-Side Request Forgery SSRF in core/modules/media.php -- uploadfrominet Media Manager's "Upload by URL" functionality...
PT-2026-96124
Name of the Vulnerable Software and Affected Versions CuteNews version 2.1.2 Description An unrestricted file upload issue exists in the core/modules/media.php file. Remote authenticated users with access to the Media Manager panel can upload files of dangerous types to execute arbitrary code...
CVE-2026-36467: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type in core/modules/media.php in CuteNews v.2.1.2 allows remote authenticated users with access to the Media Manager panel to execute arbitrary code in the context of the web application, leading to remote server access by triggering a reverse shell...
CVE-2026-36469: Server-Side Request Forgery (SSRF)
CuteNews v.2.1.2 is vulnerable to Server-Side Request Forgery SSRF in core/modules/media.php -- uploadfrominet Media Manager's "Upload by URL" functionality...
