Vulnerabilities

Summary — last 7 days

New vulnerabilities2,631▼ 309 vs. last week
Critical / high1,352▲ 90 vs. last week
New active exploitation (KEV)5▼ 3 vs. last week
Unscored (no CVSS)64▼ 462 vs. last week
–

2 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedHigh (7.5)1.1%—China-on-site Flexphpnews1/21/20096/16/2026
Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPNews 0.0.6 allow remote attackers to execute arbitrary SQL commands via the (1) checkuser parameter (aka username field) or (2) checkpass parameter (aka password field) to admin/index.php. NOTE: some of these details are obtained from third party…
ModifiedHigh (7.5)2.2%—China-on-site Flexphpnews5/2/20056/16/2026
SQL injection vulnerability in news.php in FlexPHPNews 0.0.3 allows remote attackers to execute arbitrary SQL commands via the newsid parameter.