PatchTheCVEnewsscript vulnerabilities and fixes
Recent CVEs affecting newsscript, with upgrade or downgrade steps. 5 tracked.
newsscript has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2006-09-13. Highest priority: CVE-2005-0735 (score 64/100).
- CVE-2006-4768 MEDIUM 5.0 DOWNGRADE Multiple direct static code injection vulnerabilities in add_go.php in Stefan Ernst Newsscript (aka WM-News) 0
- CVE-2006-4767 MEDIUM 6.4 DOWNGRADE Multiple directory traversal vulnerabilities in Stefan Ernst Newsscript (aka WM-News) 0.5beta allow remote att
- CVE-2006-4766 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in print.php in Stefan Ernst Newsscript (aka WM-News) 0.5 beta allows remote
- CVE-2006-4666 HIGH 7.5 DOWNGRADE Multiple PHP remote file inclusion vulnerabilities in Stefan Ernst Newsscript (aka WM-News) 0.5 beta allow rem
- CVE-2005-0735 HIGH 10.0 MITIGATE newsscript.pl for NewsScript allows remote attackers to gain privileges by setting the mode parameter to admin
FAQ
How do I fix newsscript vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is newsscript being exploited right now?
None of the tracked newsscript CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which newsscript CVE should I patch first?
CVE-2005-0735 currently ranks highest (64/100): newsscript.pl for NewsScript allows remote attackers to gain privileges by setting the mode parameter to admin.