Simplenews

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Simplenews records in CISA KEV

No Simplenews vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Simplenews 3 records MEDIUM

Records

3 records in Simplenews · all components

TI-2007-02510 CVE-2007-2598 · GHSA-6785-cq9h-6279

SQL injection vulnerability in print.php in SimpleNews 1.0.0 FINAL allows remote…

MEDIUM 47

SQL injection vulnerability in print.php in SimpleNews 1.0.0 FINAL allows remote attackers to execute arbitrary SQL commands via the news_id parameter.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01904 Published 2007-05-11 No fix listed

TI-2007-04699 CVE-2007-4873 · GHSA-8xmm-2h7f-547x

SimpNews 2.41.03 stores sensitive information under the web root with insufficient access…

LOW 26

SimpNews 2.41.03 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download arbitrary .inc files via a direct request, as demonstrated by admin/includes/db…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01491 Published 2007-09-27 No fix listed CWE-264

TI-2007-04698 CVE-2007-4872 · GHSA-3c6c-vv76-h53v

SimpNews 2.41.03 allows remote attackers to obtain sensitive information via (1) an…

LOW 26

SimpNews 2.41.03 allows remote attackers to obtain sensitive information via (1) an invalid lang parameter to admin/index.php; or a direct request to (2) admin/dbg_infos.php, (3) admin/heading.php, or (4) evsearch.php; w…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01816 Published 2007-09-27 No fix listed

Open these records in search →

Critical	1
High	0
Medium	3
Low	0
No CVSS	0