Cutenews Security Vulnerabilities and Issues — Cutenews CVE List

Lucene search

CutephpCutenews

3 matches found

CVE•added 2009/12/10 12:30 a.m.•41 views

CVE-2009-4249

Multiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to inject arbitrary web script or HTML via the (1) lastusername and (2) mod parameters to index.php; and (3) the title parameter t...

2.6CVSS5.8AI score0.03794EPSS

CVE•added 2006/07/18 3:47 p.m.•40 views

CVE-2006-3661

Cross-site scripting (XSS) vulnerability in Index.PHP in CuteNews 1.4.5 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

2.6CVSS5.8AI score0.00286EPSS

CVE•added 2009/12/02 7:30 p.m.•36 views

CVE-2009-4172

Cross-site scripting (XSS) vulnerability in index.php in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews 8 and 8b, when magic_quotes_gpc is disabled, allows remote attackers to inject arbitrary web script or HTML via the body of a news article in an addnews action.

2.6CVSS5.7AI score0.00917EPSS