Vulnerabilities

TI-2011-02367 CVE-2011-2706 · GHSA-4g42-x277-3hhc

A Cross-Site Scripting (XSS) vulnerability exists in the reorder administrator functions in sNews 1.71.

LOW 28

A Cross-Site Scripting (XSS) vulnerability exists in the reorder administrator functions in sNews 1.71.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00699 Published 2020-01-14 No fix listed CWE-79

TI-2008-01360 CVE-2008-1413 · GHSA-f2h2-q5r3-xf9c

Cross-site scripting (XSS) vulnerability in search.php in SNewsCMS Rus 2.1 through 2.4…

LOW 23

Cross-site scripting (XSS) vulnerability in search.php in SNewsCMS Rus 2.1 through 2.4 allows remote attackers to inject arbitrary web script or HTML via the query parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01458 Published 2008-03-20 No fix listed CWE-79

TI-2007-00252 CVE-2007-0261 · GHSA-p5x6-4c84-ww2p

snews.php in sNews 1.5.30 and earlier does not properly exit when authentication fails…

MEDIUM 50

snews.php in sNews 1.5.30 and earlier does not properly exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions, as demonstrated by changing an administrative password…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04783 Published 2007-01-16 No fix listed

Vulnerabilities

Filters

A Cross-Site Scripting (XSS) vulnerability exists in the reorder administrator functions in sNews 1.71.

Cross-site scripting (XSS) vulnerability in search.php in SNewsCMS Rus 2.1 through 2.4…

snews.php in sNews 1.5.30 and earlier does not properly exit when authentication fails…