Vendors / Planerd.net Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Planerd.net records in CISA KEV No Planerd.net vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 36
Unrestricted file upload vulnerability in P-News 2.0 allows remote attackers to upload and execute arbitrary files via an avatar file.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01429 · Published 2007-03-06 · No fix listed CWE-20
Priority LOW 28
P-News 2.0 stores db/user.txt under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and password hashes via a direct request.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02547 · Published 2007-03-06 · No fix listed CWE-264
Open these records in search → All records by CVSS severity
0 1 1 0 0
