PatchTheCVEnewsphp vulnerabilities and fixes
Recent CVEs affecting newsphp, with upgrade or downgrade steps. 8 tracked.
newsphp has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2006-07-06. Highest priority: CVE-2004-2689 (score 56/100).
- CVE-2006-3359 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject arbit
- CVE-2006-3358 MEDIUM 6.8 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to
- CVE-2006-0413 HIGH 7.5 MITIGATE Multiple SQL injection vulnerabilities in index.php in NewsPHP allow remote attackers to execute arbitrary SQL
- CVE-2004-2690 HIGH 8.5 MITIGATE Unrestricted file upload vulnerability in the Administration Panel for NewsPHP allows remote authenticated adm
- CVE-2004-2689 HIGH 10.0 MITIGATE NewsPHP allows remote attackers to gain unauthorized administrative access by setting a cookie to the "autoriz
- CVE-2004-2688 MEDIUM 4.3 MITIGATE Cross-site scripting (XSS) vulnerability in index.php in NewsPHP allows remote attackers to inject arbitrary w
- CVE-2003-0754 HIGH 7.5 UPGRADE nphpd.php in newsPHP 216 and earlier allows remote attackers to bypass authentication via an HTTP request with
- CVE-2003-0753 MEDIUM 5.0 UPGRADE nphpd.php in newsPHP 216 and earlier allows remote attackers to read arbitrary files via a full pathname to th
FAQ
How do I fix newsphp vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is newsphp being exploited right now?
None of the tracked newsphp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which newsphp CVE should I patch first?
CVE-2004-2689 currently ranks highest (56/100): NewsPHP allows remote attackers to gain unauthorized administrative access by setting a cookie to the "autoriz.