← Back

Admin News Tools

admin_news_tools

Vendor: Adminnewstools • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-2558
1Adminnewstools
1Admin News Tools
Apr 23, 2026
Jul 21, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
system/message.php in Admin News Tools 2.5 does not properly restrict access, which allows remote attackers to post news messages via a direct request.
CVE-2009-2557
1Adminnewstools
1Admin News Tools
Apr 23, 2026
Jul 21, 2009
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Directory traversal vulnerability in system/download.php in Admin News Tools 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the fichier parameter.