Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Snewscms Component: Snews Clear all filters
TI-2016-09228 CVE-2016-20052 · GHSA-6p9p-r3m2-r76g

Snews CMS 1.7 Unrestricted File Upload via snews_files

Priority HIGH 81

Snews CMS 1.7 contains an unrestricted file upload vulnerability that allows unauthenticated attackers to upload arbitrary files including PHP executables to the snews_files directory.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00967 Published 2026-04-04 No fix listed CWE-434
TI-2016-09227 CVE-2016-20051 · GHSA-qqrh-w78r-g98g

Snews CMS 1.7 Cross-Site Request Forgery via changeup

Priority HIGH 70

Snews CMS 1.7 contains a cross-site request forgery vulnerability that allows attackers to change administrator credentials without authentication by crafting malicious HTML forms.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00168 Published 2026-04-04 No fix listed CWE-352