← Back

Snews

snews

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Snews
snews
1 CVE
Snews Cms Rus
snews_cms_rus
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-1413
1Snews
1Snews Cms Rus
Apr 23, 2026
Mar 20, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in search.php in SNewsCMS Rus 2.1 through 2.4 allows remote attackers to inject arbitrary web script or HTML via the query parameter.
CVE-2007-0261
1Snews
1Snews
Apr 23, 2026
Jan 16, 2007
N/A· v4
N/A· v3
10.0 HIGH· v2
snews.php in sNews 1.5.30 and earlier does not properly exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions, as demonstrated by changing an administrative password...Show more
snews.php in sNews 1.5.30 and earlier does not properly exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions, as demonstrated by changing an administrative password via the changeup task, and by uploading PHP code via the imagefile parameter.Show less