Read the docs

Sitenews

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Sitenews records in CISA KEV

No Sitenews vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Sitenews 1 record LOW

Records

1 record

TI-2002-00275 CVE-2002-0286 · GHSA-g6rv-jcq2-9j99

The GetPassword function in function.php of SiteNews 0.10 and 0.11 allows remote…

Priority LOW 36

The GetPassword function in function.php of SiteNews 0.10 and 0.11 allows remote attackers to gain privileges and add users by providing a non-existent user name and the MD5 checksum for an empty password to add_user.php…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01571 Published 2002-05-03 No fix listed
Open these records in search →