Skip to content
Noroxi

mysimplenews records

3 published records for vendor mysimplenews.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    3 records
    • CVE-2002-2143
      31Monitor

      The admin.html file in MySimple News 1.0 stores its administrative password in plaintext, which allows remote attackers to gain unauthorized

      HighCVSS 7.5Proof of conceptEPSS 2%

      mysimplenews · mysimplenewsDec 31, 2002

    • CVE-2002-2319
      31Monitor

      Static code injection vulnerability in users.php in MySimpleNews allows remote attackers to inject arbitrary PHP code and HTML via the (1) L

      HighCVSS 7.5Proof of conceptEPSS 2%

      mysimplenews · mysimplenewsDec 31, 2002

    • CVE-2002-2320
      31Monitor

      MySimpleNews 1.0 allows remote attackers to delete arbitrary email messages via a direct request to vider.php3.

      HighCVSS 7.8No exploitEPSS 1%

      mysimplenews · mysimplenewsDec 31, 2002