CVE-2020-25472

SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Request Forgery CSRF vulnerability, which allows attackers to add new users...

CVE-2020-25472

The CVE-2020-25472 entry concerns SimplePHPscripts News Script PHP Pro 2.3, which is reported to be vulnerable to Cross Site Request Forgery (CSRF) allowing attackers to add new users. The connected sources consistently identify CSRF as the issue and tie it to News Script PHP Pro 2.3, with no add...

CVE-2020-25472: Cross-Site Request Forgery (CSRF)

SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Request Forgery CSRF vulnerability, which allows attackers to add new users...

PT-2020-16092

Name of the Vulnerable Software and Affected Versions SimplePHPscripts News Script PHP Pro version 2.3 Description The issue is related to the improper setting of the HttpOnly Flag from Session Cookies. This could potentially allow unauthorized access to session cookies. Recommendations For...

CVE-2020-25475: Improper Neutralization of Special Elements used in an SQL Command

SimplePHPscripts News Script PHP Pro 2.3 is affected by a SQL Injection via the id parameter in an editNews action...

Simplephpscripts News Script PHP Pro Security Vulnerability

Simplephpscripts Simplephpscripts News Script PHP Pro is a Php Mysql based news distribution system by Simplephpscripts Bulgaria. A security vulnerability exists in SimplePHPscripts News Script PHP Pro version 2.3 that stems from not properly setting the HttpOnly flag from the session cookie...

CVE-2020-25474: Improper Neutralization of Input During Web Page Generation

SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Scripting XSS vulnerability via the editorname parameter...

PT-2020-16091

Name of the Vulnerable Software and Affected Versions SimplePHPscripts News Script PHP Pro version 2.3 Description The issue allows attackers to add new users due to a Cross Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on the...

PT-2020-16093

Name of the Vulnerable Software and Affected Versions SimplePHPscripts News Script PHP Pro version 2.3 Description The issue is a Cross Site Scripting XSS vulnerability. It can be exploited via the editor name parameter. Recommendations For SimplePHPscripts News Script PHP Pro version 2.3, avoid...

CVE-2020-25473: Undefined Security Weakness

SimplePHPscripts News Script PHP Pro 2.3 does not properly set the HttpOnly Flag from Session Cookies...

PT-2020-16094

Name of the Vulnerable Software and Affected Versions SimplePHPscripts News Script PHP Pro version 2.3 Description The issue is a SQL Injection via the id parameter in an editNews action. This allows for potential exploitation of the software. Recommendations For SimplePHPscripts News Script PHP...