Read the docs

Snewscms

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Snewscms records in CISA KEV

No Snewscms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Snews 3 records HIGH Snewscms Rus 1 record LOW

Records

4 records

TI-2016-09228 CVE-2016-20052 · GHSA-6p9p-r3m2-r76g

Snews CMS 1.7 Unrestricted File Upload via snews_files

Priority HIGH 81

Snews CMS 1.7 contains an unrestricted file upload vulnerability that allows unauthenticated attackers to upload arbitrary files including PHP executables to the snews_files directory.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00967 Published 2026-04-04 No fix listed CWE-434
TI-2016-09227 CVE-2016-20051 · GHSA-qqrh-w78r-g98g

Snews CMS 1.7 Cross-Site Request Forgery via changeup

Priority HIGH 70

Snews CMS 1.7 contains a cross-site request forgery vulnerability that allows attackers to change administrator credentials without authentication by crafting malicious HTML forms.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00168 Published 2026-04-04 No fix listed CWE-352
Open these records in search →