Vendors / Haroldbakker Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now Haroldbakker records in CISA KEV No Haroldbakker vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 36
Harold Bakker's NewsScript (HB-NS) 1.3 allows remote attackers to obtain access to the admin control panel via a direct request to admin.php.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0134 · Published 2009-12-10 · No fix listed CWE-264
Priority LOW 22
Cross-site scripting (XSS) vulnerability in index.php in Harold Bakker's NewsScript (HB-NS) 1.3 allows remote attackers to inject arbitrary web script or HTML via the topic parameter in a topic action, a different vector…
CVSS 2.0 MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.00871 · Published 2009-12-17 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
Critical0 High1 Medium1 Low0 No CVSS0