PatchTheCVEmysimplenews vulnerabilities and fixes
Recent CVEs affecting mysimplenews, with upgrade or downgrade steps. 3 tracked.
mysimplenews has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2002-12-31. Highest priority: CVE-2002-2143 (score 53/100).
- CVE-2002-2320 HIGH 7.8 DOWNGRADE MySimpleNews 1.0 allows remote attackers to delete arbitrary email messages via a direct request to vider.php3
- CVE-2002-2319 HIGH 7.5 DOWNGRADE Static code injection vulnerability in users.php in MySimpleNews allows remote attackers to inject arbitrary P
- CVE-2002-2143 HIGH 7.5 DOWNGRADE The admin.html file in MySimple News 1.0 stores its administrative password in plaintext, which allows remote
FAQ
How do I fix mysimplenews vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mysimplenews being exploited right now?
None of the tracked mysimplenews CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mysimplenews CVE should I patch first?
CVE-2002-2143 currently ranks highest (53/100): The admin.html file in MySimple News 1.0 stores its administrative password in plaintext, which allows remote .