Utopia Software

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Utopia Software records in CISA KEV

No Utopia Software vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Utopia News Pro 3 records LOW

Records

3 records

TI-2005-03968 CVE-2005-4223 · GHSA-369w-ch94-45q9

Multiple "potential" SQL injection vulnerabilities in Utopia News Pro (UNP) 1.1.4 might…

LOW 36

Multiple "potential" SQL injection vulnerabilities in Utopia News Pro (UNP) 1.1.4 might allow remote attackers to execute arbitrary SQL commands via (1) the newsid parameter in editnews.php, (2) the catid and question pa…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01801 Published 2005-12-14 No fix listed

TI-2005-03026 CVE-2005-3200 · GHSA-7749-gxmh-frwx

Multiple cross-site scripting (XSS) vulnerabilities in Utopia News Pro (UNP) 1.1.3 and…

LOW 25

Multiple cross-site scripting (XSS) vulnerabilities in Utopia News Pro (UNP) 1.1.3 and 1.1.4 allow remote attackers to inject arbitrary web script or HTML via (1) the sitetitle parameter in header.php and (2) the version…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02624 Published 2005-10-14 No fix listed

TI-2007-03026 CVE-2007-3129 · GHSA-3mj5-5ph7-ggjq

Cross-site scripting (XSS) vulnerability in login.php in Utopia News Pro 1.4.0 allows…

LOW 16

Cross-site scripting (XSS) vulnerability in login.php in Utopia News Pro 1.4.0 allows remote attackers to inject arbitrary web script or HTML via the password parameter.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.01336 Published 2007-06-19 No fix listed

Open these records in search →

Critical	0
High	1
Medium	1
Low	1
No CVSS	0