PatchTheCVEsimpnews vulnerabilities and fixes
Recent CVEs affecting simpnews, with upgrade or downgrade steps. 6 tracked.
simpnews has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2010-07-25. Highest priority: CVE-2007-2750 (score 48/100).
- CVE-2010-2859 MEDIUM 5.0 UPGRADE news.php in SimpNews 2.47.3 and earlier allows remote attackers to obtain sensitive information via an invalid
- CVE-2010-2858 MEDIUM 4.3 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in news.php in SimpNews 2.47.03 and earlier allow remote a
- CVE-2007-5128 MEDIUM 5.0 DOWNGRADE UPGRADE SimpNews 2.41.03 on Windows, when PHP before 5.0.0 is used, allows remote attackers to obtain sensitive inform
- CVE-2007-4874 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in SimpNews 2.41.03 allow remote attackers to inject arbit
- CVE-2007-2750 HIGH 7.5 UPGRADE SQL injection vulnerability in print.php in SimpNews 2.40.01 and earlier allows remote attackers to execute ar
- CVE-2006-5530 MEDIUM 4.3 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in Boesch SimpNews before 2.34.01 allow remote attackers t
FAQ
How do I fix simpnews vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is simpnews being exploited right now?
None of the tracked simpnews CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which simpnews CVE should I patch first?
CVE-2007-2750 currently ranks highest (48/100): SQL injection vulnerability in print.php in SimpNews 2.40.01 and earlier allows remote attackers to execute ar.