Phpfastnews

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Phpfastnews records in CISA KEV

No Phpfastnews vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Phpfastnews 1 record LOW

Records

1 record in Phpfastnews · all components

TI-2008-04405 CVE-2008-4622 · GHSA-g9rf-p4mr-jfcj

The isLoggedIn function in fastnews-code.php in phpFastNews 1.0.0 allows remote attackers…

LOW 38

The isLoggedIn function in fastnews-code.php in phpFastNews 1.0.0 allows remote attackers to bypass authentication and gain administrative access by setting the fn-loggedin cookie to 1.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03104 Published 2008-10-21 No fix listed CWE-287

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0