Vulnerabilities > CVE-2004-2690 - File-Upload vulnerability in newsPHP

047910
CVSS 8.5 - HIGH
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
SINGLE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
newsphp

Summary

Unrestricted file upload vulnerability in the Administration Panel for NewsPHP allows remote authenticated administrators to upload and execute arbitrary code instead of video files.

Vulnerable Configurations

Part Description Count
Application
Newsphp
1