Simpnews Security Vulnerabilities and Issues — Simpnews CVE List

Lucene search

Boesch-itSimpnews

2 matches found

CVE•added 2007/09/27 7:17 p.m.•50 views

CVE-2007-5128

SimpNews 2.41.03 on Windows, when PHP before 5.0.0 is used, allows remote attackers to obtain sensitive information via an certain link_date parameter to events.php, which reveals the path in an error message due to an unsupported argument type for the mktime function on Windows.

5CVSS6.3AI score0.00319EPSS

CVE•added 2010/07/25 2:4 a.m.•35 views

CVE-2010-2859

news.php in SimpNews 2.47.3 and earlier allows remote attackers to obtain sensitive information via an invalid lang parameter, which reveals the installation path in an error message.

5CVSS6.4AI score0.0025EPSS