Stphp Easynews
3 CVEs affecting Stphp Easynews. Latest disclosed: 2007-06-21. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2007-3331 | | 2007-06-21 | Cross-site request forgery (CSRF) vulnerability in STphp EasyNews PRO 4.0 allows remote attackers to change the admin password via (1) a certain HTML form that… | |
CVE-2007-3330 | | 2007-06-21 | Cross-site scripting (XSS) vulnerability in STphp EasyNews PRO 4.0 allows remote attackers to inject arbitrary web script or HTML via a news post, which is sto… | |
CVE-2006-6866 | | 2006-12-31 | STphp EasyNews PRO 4.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames, ema… |