← Back

Phnews

phnews

Vendor: Phnews • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-0866
1Phnews
1Phnews
Apr 23, 2026
Mar 10, 2009
N/A· v4
N/A· v3
5.0 MEDIUM· v2
pHNews Alpha 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for extra/genbackup.php.