PatchTheCVEsimple php news vulnerabilities and fixes
Recent CVEs affecting simple php news, with upgrade or downgrade steps. 2 tracked.
Also searched as: simplephpnews.
simple php news has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2009-02-20. Highest priority: CVE-2009-0610 (score 54/100).
- CVE-2009-0643 MEDIUM 5.1 DOWNGRADE Static code injection vulnerability in post.php in Simple PHP News 1.0 final allows remote attackers to inject
- CVE-2009-0610 HIGH 7.5 DOWNGRADE Multiple static code injection vulnerabilities in post.php in Simple PHP News 1.0 final allow remote attackers
FAQ
How do I fix simple php news vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is simple php news being exploited right now?
None of the tracked simple php news CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which simple php news CVE should I patch first?
CVE-2009-0610 currently ranks highest (54/100): Multiple static code injection vulnerabilities in post.php in Simple PHP News 1.0 final allow remote attackers.