Newspower Security Vulnerabilities - February

cve

CVE-2007-2554

Associated Press (AP) Newspower 4.0.1 and earlier uses a default blank password for the MySQL root account, which allows remote attackers to insert or modify news articles via shows.tblscript.

9.4AI Score

0.007EPSS

2007-05-09 05:19 PM