Skip to content
Noroxi

newsphp records

8 published records for vendor newsphp.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    8 records
    • CVE-2004-2689
      41Plan

      NewsPHP allows remote attackers to gain unauthorized administrative access by setting a cookie to the "autorized=admin; root=admin" value.

      CriticalCVSS 10.0No exploitEPSS 2%

      newsphp · newsphpDec 31, 2004

    • CVE-2004-2690
      35Monitor

      Unrestricted file upload vulnerability in the Administration Panel for NewsPHP allows remote authenticated administrators to upload and exec

      HighCVSS 8.5No exploitEPSS 2%

      newsphp · newsphpDec 31, 2004

    • CVE-2003-0754
      31Monitor

      nphpd.php in newsPHP 216 and earlier allows remote attackers to bypass authentication via an HTTP request with a modified nphp_users array,

      HighCVSS 7.5No exploitEPSS 2%

      newsphp · newsphpOct 20, 2003

    • CVE-2006-0413
      30Monitor

      Multiple SQL injection vulnerabilities in index.php in NewsPHP allow remote attackers to execute arbitrary SQL commands via the (1) discuss,

      HighCVSS 7.5Proof of conceptEPSS 1%

      newsphp · newsphpJan 25, 2006

    • CVE-2006-3359
      30Monitor

      Multiple SQL injection vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject arbitrary web script or HTML via th

      HighCVSS 7.5Proof of conceptEPSS 1%

      newsphp · newsphpJul 6, 2006

    • CVE-2006-3358
      27Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject arbitrary web script o

      MediumCVSS 6.8Proof of conceptEPSS 2%

      newsphp · newsphpJul 6, 2006

    • CVE-2003-0753
      21Monitor

      nphpd.php in newsPHP 216 and earlier allows remote attackers to read arbitrary files via a full pathname to the target file in the nphp_conf

      MediumCVSS 5.0No exploitEPSS 2%

      newsphp · newsphpOct 20, 2003

    • CVE-2004-2688
      17Monitor

      Cross-site scripting (XSS) vulnerability in index.php in NewsPHP allows remote attackers to inject arbitrary web script or HTML via the cat_

      MediumCVSS 4.3No exploitEPSS 1%

      newsphp · newsphpDec 31, 2004