CuteNews/UTF-8 CuteNews Multiple Vulneablities

The host is running CuteNews/UTF-8 CuteNews and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbcutenewsnutf8cutenewsmultvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ CuteNews/UTF-8 CuteNews Multiple Vulneablities Authors: Antu Sanadi Udated By: Antu Sanadi on 2009-12-10 61...

CVE-2009-4115

CVE-2009-4115 affects CuteNews/CutePHP (CuteNews 1.4.6). The Categories module is vulnerable to multiple static code injection flaws that allow remote authenticated admins to inject arbitrary PHP code into data/category.db.php (via the category and Icon URL fields) or into data/ipban.php (via the...