CuteNews/UTF-8 CuteNews Multiple Vulneablities

The host is running CuteNews/UTF-8 CuteNews and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbcutenewsnutf8cutenewsmultvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ CuteNews/UTF-8 CuteNews Multiple Vulneablities Authors: Antu Sanadi Udated By: Antu Sanadi on 2009-12-10 61...

CVE-2009-4113

CVE-2009-4113 affects CuteNews/CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b. The vulnerability is a static code injection in the Categories module that allows remote authenticated users with administrative privileges to inject arbitrary PHP code into data/category.db.php via the Category A...