Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3029▲ 460 respecto a la semana anterior
Críticas / altas1445▲ 228 respecto a la semana anterior
Nueva explotación activa (KEV)8▼ 2 respecto a la semana anterior
Sin puntuar (sin CVSS)365▲ 156 respecto a la semana anterior
9 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 1.1% | — | Newsscriptphp News Script PHP PRO | 24/11/2020 | 17/6/2026 | SimplePHPscripts News Script PHP Pro 2.3 is affected by a SQL Injection via the id parameter in an editNews action. | |
| Modificada | Media (6.1) | 0.87% | — | Newsscriptphp News Script PHP PRO | 24/11/2020 | 17/6/2026 | SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Scripting (XSS) vulnerability via the editor_name parameter. | |
| Modificada | Media (6.5) | 0.92% | — | Newsscriptphp News Script PHP PRO | 24/11/2020 | 17/6/2026 | SimplePHPscripts News Script PHP Pro 2.3 does not properly set the HttpOnly Flag from Session Cookies. | |
| Modificada | Media (6.5) | 0.52% | — | Newsscriptphp News Script PHP PRO | 24/11/2020 | 17/6/2026 | SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Request Forgery (CSRF) vulnerability, which allows attackers to add new users. | |
| Modificada | Media (6.4) | 1.6% | — | Stefan Ernst Newsscript | 13/9/2006 | 16/6/2026 | Multiple directory traversal vulnerabilities in Stefan Ernst Newsscript (aka WM-News) 0.5beta allow remote attackers to (1) read arbitrary local files via a .. (dot dot) sequence in the ide parameter in modify.php and (2) write to arbitrary local files via a .. sequence in the var parameter in add_go.php. NOTE: the… | |
| Modificada | Media (5) | 1.3% | — | Stefan Ernst Newsscript | 13/9/2006 | 16/6/2026 | Multiple direct static code injection vulnerabilities in add_go.php in Stefan Ernst Newsscript (aka WM-News) 0.5 beta allow remote attackers to execute arbitrary PHP code via the (1) description, (2) issue, (3) title, (4) var, (5) name, (6) keywords, and (7) note parameters, which are stored in an article file. NOTE:… | |
| Modificada | Media (5) | 3.0% | — | Stefan Ernst Newsscript | 13/9/2006 | 16/6/2026 | Directory traversal vulnerability in print.php in Stefan Ernst Newsscript (aka WM-News) 0.5 beta allows remote attackers to read arbitrary files via a .. (dot dot) in the ide parameter. | |
| Modificada | Alta (7.5) | 4.4% | — | Stefan Ernst Newsscript | 9/9/2006 | 16/6/2026 | Multiple PHP remote file inclusion vulnerabilities in Stefan Ernst Newsscript (aka WM-News) 0.5 beta allow remote attackers to execute arbitrary PHP code via a URL in the (1) ide parameter in (a) article.php; or the (2) pwfile parameter in (b) delete.php, (c) modify.php, (d) admin.php, or (e) modify_go.php. | |
| Modificada | Alta (10) | 7.7% | — | Newsscript.co.uk Newsscript | 2/5/2005 | 16/6/2026 | newsscript.pl for NewsScript allows remote attackers to gain privileges by setting the mode parameter to admin. |