Sourceforge

Records28All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high13CVSS 7.0–8.9

Exploited now

Sourceforge records in CISA KEV

No Sourceforge vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Newsdaemon · all components

TI-2001-00232 CVE-2001-0234 · GHSA-9xw2-c3qj-x8m5

LOW 36

NewsDaemon before 0.21b allows remote attackers to execute arbitrary SQL queries and gain privileges via a malformed user_username parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01771 Published 2001-05-07 No fix listed