Snewscms

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Snewscms records in CISA KEV

No Snewscms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Snews 3 records HIGH Snewscms Rus 1 record LOW

Records

3 records in Snews · all components

TI-2016-09228 CVE-2016-20052 · GHSA-6p9p-r3m2-r76g

Snews CMS 1.7 Unrestricted File Upload via snews_files

HIGH 81

Snews CMS 1.7 contains an unrestricted file upload vulnerability that allows unauthenticated attackers to upload arbitrary files including PHP executables to the snews_files directory.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00967 Published 2026-04-04 No fix listed CWE-434

TI-2016-09227 CVE-2016-20051 · GHSA-qqrh-w78r-g98g

Snews CMS 1.7 Cross-Site Request Forgery via changeup

HIGH 70

Snews CMS 1.7 contains a cross-site request forgery vulnerability that allows attackers to change administrator credentials without authentication by crafting malicious HTML forms.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00168 Published 2026-04-04 No fix listed CWE-352

TI-2011-02367 CVE-2011-2706 · GHSA-4g42-x277-3hhc

A Cross-Site Scripting (XSS) vulnerability exists in the reorder administrator functions in sNews 1.71.

LOW 28

A Cross-Site Scripting (XSS) vulnerability exists in the reorder administrator functions in sNews 1.71.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00699 Published 2020-01-14 No fix listed CWE-79

Open these records in search →

Critical	1
High	0
Medium	3
Low	0
No CVSS	0