CVE-2023-3537: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in SimplePHPscripts News Script PHP Pro 2.4. This affects an unknown part of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The...

Session fixation

SimplePHPscripts News Script PHP Pro 2.3 does not properly set the HttpOnly Flag from Session Cookies...

PT-2020-16094

Name of the Vulnerable Software and Affected Versions SimplePHPscripts News Script PHP Pro version 2.3 Description The issue is a SQL Injection via the id parameter in an editNews action. This allows for potential exploitation of the software. Recommendations For SimplePHPscripts News Script PHP...

CVE-2020-25475: Improper Neutralization of Special Elements used in an SQL Command

SimplePHPscripts News Script PHP Pro 2.3 is affected by a SQL Injection via the id parameter in an editNews action...

PT-2020-16091

Name of the Vulnerable Software and Affected Versions SimplePHPscripts News Script PHP Pro version 2.3 Description The issue allows attackers to add new users due to a Cross Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on the...

CVE-2020-25472: Cross-Site Request Forgery (CSRF)

SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Request Forgery CSRF vulnerability, which allows attackers to add new users...

CVE-2020-25473: Undefined Security Weakness

SimplePHPscripts News Script PHP Pro 2.3 does not properly set the HttpOnly Flag from Session Cookies...

CVE-2020-25474: Improper Neutralization of Input During Web Page Generation

SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Scripting XSS vulnerability via the editorname parameter...

PT-2020-16092

Name of the Vulnerable Software and Affected Versions SimplePHPscripts News Script PHP Pro version 2.3 Description The issue is related to the improper setting of the HttpOnly Flag from Session Cookies. This could potentially allow unauthorized access to session cookies. Recommendations For...

PT-2020-16093

Name of the Vulnerable Software and Affected Versions SimplePHPscripts News Script PHP Pro version 2.3 Description The issue is a Cross Site Scripting XSS vulnerability. It can be exploited via the editor name parameter. Recommendations For SimplePHPscripts News Script PHP Pro version 2.3, avoid...