Vulnerabilities

TI-2016-09228 CVE-2016-20052 · GHSA-6p9p-r3m2-r76g

Snews CMS 1.7 Unrestricted File Upload via snews_files

HIGH 81

Snews CMS 1.7 contains an unrestricted file upload vulnerability that allows unauthenticated attackers to upload arbitrary files including PHP executables to the snews_files directory.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00967 Published 2026-04-04 No fix listed CWE-434

TI-2016-09227 CVE-2016-20051 · GHSA-qqrh-w78r-g98g

Snews CMS 1.7 Cross-Site Request Forgery via changeup

HIGH 70

Snews CMS 1.7 contains a cross-site request forgery vulnerability that allows attackers to change administrator credentials without authentication by crafting malicious HTML forms.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00168 Published 2026-04-04 No fix listed CWE-352

TI-2011-02367 CVE-2011-2706 · GHSA-4g42-x277-3hhc

A Cross-Site Scripting (XSS) vulnerability exists in the reorder administrator functions in sNews 1.71.

LOW 28

A Cross-Site Scripting (XSS) vulnerability exists in the reorder administrator functions in sNews 1.71.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00699 Published 2020-01-14 No fix listed CWE-79

TI-2007-05103 CVE-2007-5303 · GHSA-w998-w587-cjmc

Cross-site scripting (XSS) vulnerability in news_page.php in SnewsCMS Rus 2.1 allows…

LOW 22

Cross-site scripting (XSS) vulnerability in news_page.php in SnewsCMS Rus 2.1 allows remote attackers to inject arbitrary web script or HTML via the page_id parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01033 Published 2007-10-09 No fix listed CWE-79

Vulnerabilities

Filters

Snews CMS 1.7 Unrestricted File Upload via snews_files

Snews CMS 1.7 Cross-Site Request Forgery via changeup

A Cross-Site Scripting (XSS) vulnerability exists in the reorder administrator functions in sNews 1.71.

Cross-site scripting (XSS) vulnerability in news_page.php in SnewsCMS Rus 2.1 allows…