Skip to content
Noroxi

newsscriptphp records

4 published records for vendor newsscriptphp.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

4 records
  • CVE-2020-25475
    39Monitor

    SimplePHPscripts News Script PHP Pro 2.3 is affected by a SQL Injection via the id parameter in an editNews action.

    CriticalCVSS 9.8No exploitEPSS 1%

    newsscriptphp · news script php proNov 24, 2020

  • CVE-2020-25473
    26Monitor

    SimplePHPscripts News Script PHP Pro 2.3 does not properly set the HttpOnly Flag from Session Cookies.

    MediumCVSS 6.5No exploitEPSS 1%

    newsscriptphp · news script php proNov 24, 2020

  • CVE-2020-25472
    26Monitor

    SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Request Forgery (CSRF) vulnerability, which allows attackers to add new

    MediumCVSS 6.5No exploitEPSS 1%

    newsscriptphp · news script php proNov 24, 2020

  • CVE-2020-25474
    24Monitor

    SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Scripting (XSS) vulnerability via the editor_name parameter.

    MediumCVSS 6.1No exploitEPSS 1%

    newsscriptphp · news script php proNov 24, 2020