R2newsletter

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

R2newsletter records in CISA KEV

No R2newsletter vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

R2 Newsletter Lite 1 record LOW R2 Newsletter Pro 1 record LOW R2 Newsletter Stats 1 record LOW

Records

1 record

TI-2009-02487 CVE-2009-2602 · GHSA-3wh5-4rmj-5jxh

R2 Newsletter Lite, Pro, and Stats stores sensitive information under the web root with…

LOW 27

R2 Newsletter Lite, Pro, and Stats stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for admin.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02229 Published 2009-07-27 No fix listed CWE-264

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0