Cutenews@1.3.6 Security Vulnerabilities and Issues — Cutenews@1.3.6 CVE List

Lucene search

CutephpCutenews1.3.6

4 matches found

CVE•added 2006/08/29 11:4 p.m.•73 views

CVE-2006-4445

Multiple PHP remote file inclusion vulnerabilities in CuteNews 1.3.x allow remote attackers to execute arbitrary PHP code via a URL in the cutepath parameter to (1) show_news.php or (2) search.php. NOTE: CVE analysis as of 20060829 has not identified any scenarios in which these vectors could resul...

7.5CVSS7.5AI score0.01155EPSS

CVE•added 2006/05/09 10:2 a.m.•50 views

CVE-2006-2249

Multiple cross-site scripting (XSS) vulnerabilities in search.php in CuteNews 1.4.1 and earlier, and possibly 1.4.5, allow remote attackers to inject arbitrary web script or HTML via the (1) user, (2) story, or (3) title parameters.

4.3CVSS5.9AI score0.09888EPSS

CVE•added 2006/12/05 11:28 a.m.•42 views

CVE-2006-6300

Cross-site scripting (XSS) vulnerability in CuteNews 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the result parameter.

4.3CVSS6AI score0.00342EPSS

CVE•added 2006/03/21 2:6 a.m.•32 views

CVE-2006-1340

CuteNews 1.4.1 and possibly other versions allows remote attackers to obtain the installation path via unspecified vectors involving an invalid file path.

5CVSS6.7AI score0.00477EPSS