Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
cutephp vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2006-2249
Multiple cross-site scripting (XSS) vulnerabilities in search.php in CuteNews 1.4.1 and previous versions, and possibly 1.4.5, allow remote malicious users to inject arbitrary web script or HTML via the (1) user, (2) story, or (3) title parameters.
Cutephp Cutenews 1.3
Cutephp Cutenews 1.3.1
Cutephp Cutenews 0.88
Cutephp Cutenews
Cutephp Cutenews 1.3.2
Cutephp Cutenews 1.3.6
Cutephp Cutenews 1.4.0
Cutephp Cutenews 1.4.5
1 EDB exploit
5
CVSSv2
CVE-2006-1340
CuteNews 1.4.1 and possibly other versions allows remote malicious users to obtain the installation path via unspecified vectors involving an invalid file path.
Cutephp Cutenews
Cutephp Cutenews 0.88
Cutephp Cutenews 1.3
Cutephp Cutenews 1.3.6
Cutephp Cutenews 1.4.0
Cutephp Cutenews 1.3.1
Cutephp Cutenews 1.3.2
4.3
CVSSv2
CVE-2005-3009
Cross-site scripting (XSS) vulnerability in CuteNews allows remote malicious users to inject arbitrary web script or HTML via the mod parameter to index.php.
Cutephp Cutenews 1.3.6
Cutephp Cutenews 1.3.1
Cutephp Cutenews 1.3.2
Cutephp Cutenews
Cutephp Cutenews 0.88
Cutephp Cutenews 1.3
4.3
CVSSv2
CVE-2004-1659
Cross-site scripting (XSS) vulnerability in index.php in CuteNews 1.3.6 and previous versions allows remote attackers with Administrator, Editor, Journalist or Commenter privileges to inject arbitrary web script or HTML via the mod parameter.
Cutephp Cutenews 1.3.6
Cutephp Cutenews 1.3.1
Cutephp Cutenews 1.3.2
Cutephp Cutenews 0.88
Cutephp Cutenews 1.3
1 EDB exploit
7.5
CVSSv2
CVE-2006-4445
Multiple PHP remote file inclusion vulnerabilities in CuteNews 1.3.x allow remote malicious users to execute arbitrary PHP code via a URL in the cutepath parameter to (1) show_news.php or (2) search.php. NOTE: CVE analysis as of 20060829 has not identified any scenarios in which ...
Cutephp Cutenews 1.3.6
Cutephp Cutenews 1.3.2
Cutephp Cutenews 1.3
Cutephp Cutenews 1.3.1
7.2
CVSSv2
CVE-2004-1573
The documentation for AJ-Fork 167 implies that users should set permissions for users.db.php to 777, which allows local users to execute arbitrary PHP code and gain privileges as the administrator.
Cutephp Cutenews 0.88
Cutephp Cutenews 1.3
Cutephp Cutenews 1.3.1
Cutephp Cutenews 1.3.2
Cutephp Cutenews 1.3.6
Aj-fork Aj-fork 167
6.8
CVSSv2
CVE-2004-0660
Cross-site scripting (XSS) vulnerability in (1) show_archives.php, (2) show_news.php, and possibly other php files in CuteNews 1.3.1 allows remote malicious users to inject arbitrary script or HTML via the id parameter.
Cutephp Cutenews 0.88
Cutephp Cutenews 1.3
Cutephp Cutenews 1.3.1
5 EDB exploits
5
CVSSv2
CVE-2006-1339
Directory traversal vulnerability in inc/functions.inc.php in CuteNews 1.4.1 and possibly other versions, when register_globals is enabled, allows remote malicious users to include arbitrary files via a .. (dot dot) sequence and trailing NULL (%00) byte in the archive parameter i...
Cutephp Cutenews
7.5
CVSSv2
CVE-2004-1660
PHP remote file inclusion vulnerability in CuteNews 1.3.6 and previous versions allows remote malicious users to execute arbitrary PHP code via the cutepath parameter to (1) show_archives.php or (2) show_news.php.
Cutephp Cutenews
5
CVSSv2
CVE-2005-3507
Directory traversal vulnerability in CuteNews 1.4.1 allows remote malicious users to include arbitrary files, execute code, and gain privileges via "../" sequences in the template parameter to (1) show_archives.php and (2) show_news.php.
Cutephp Cutenews
2 EDB exploits
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-24955
man-in-the-middle
dos
CVE-2024-2818
CVE-2024-30584
CVE-2024-31134
camera
CVE-2023-45866
CVE-2024-30585
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
NEXT »