Vulnerabilities

TI-2007-04699 CVE-2007-4873 · GHSA-8xmm-2h7f-547x

SimpNews 2.41.03 stores sensitive information under the web root with insufficient access…

LOW 26

SimpNews 2.41.03 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download arbitrary .inc files via a direct request, as demonstrated by admin/includes/db…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01491 Published 2007-09-27 No fix listed CWE-264

TI-2007-04698 CVE-2007-4872 · GHSA-3c6c-vv76-h53v

SimpNews 2.41.03 allows remote attackers to obtain sensitive information via (1) an…

LOW 26

SimpNews 2.41.03 allows remote attackers to obtain sensitive information via (1) an invalid lang parameter to admin/index.php; or a direct request to (2) admin/dbg_infos.php, (3) admin/heading.php, or (4) evsearch.php; w…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01816 Published 2007-09-27 No fix listed

TI-2007-02510 CVE-2007-2598 · GHSA-6785-cq9h-6279

SQL injection vulnerability in print.php in SimpleNews 1.0.0 FINAL allows remote…

MEDIUM 47

SQL injection vulnerability in print.php in SimpleNews 1.0.0 FINAL allows remote attackers to execute arbitrary SQL commands via the news_id parameter.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01904 Published 2007-05-11 No fix listed

Vulnerabilities

Filters

SimpNews 2.41.03 stores sensitive information under the web root with insufficient access…

SimpNews 2.41.03 allows remote attackers to obtain sensitive information via (1) an…

SQL injection vulnerability in print.php in SimpleNews 1.0.0 FINAL allows remote…