Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
NewsscriptphpNews Script Php Pro2.3

4 matches found

CVE
CVE•added 2020/11/24 3:15 p.m.•37 views

CVE-2020-25474

SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Scripting (XSS) vulnerability via the editor_name parameter.

6.1CVSS6AI score0.00412EPSS
CVE
CVE•added 2020/11/24 3:15 p.m.•30 views

CVE-2020-25473

SimplePHPscripts News Script PHP Pro 2.3 does not properly set the HttpOnly Flag from Session Cookies.

6.5CVSS6.5AI score0.00412EPSS
CVE
CVE•added 2020/11/24 3:15 p.m.•30 views

CVE-2020-25475

SimplePHPscripts News Script PHP Pro 2.3 is affected by a SQL Injection via the id parameter in an editNews action.

9.8CVSS9.8AI score0.00307EPSS
CVE
CVE•added 2020/11/24 3:15 p.m.•28 views

CVE-2020-25472

SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Request Forgery (CSRF) vulnerability, which allows attackers to add new users.

6.5CVSS6.6AI score0.00193EPSS