Vulnerabilities > Cutephp
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2020-03-25 | CVE-2020-5558 | Code Injection vulnerability in Cutephp Cutenews 2.0.1 CuteNews 2.0.1 allows remote authenticated attackers to execute arbitrary PHP code via unspecified vectors. | 8.8 |
| 2020-03-25 | CVE-2020-5557 | Cross-site Scripting vulnerability in Cutephp Cutenews 2.0.1 Cross-site scripting vulnerability in CuteNews 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 6.1 |
| 2019-04-22 | CVE-2019-11447 | Unrestricted Upload of File with Dangerous Type vulnerability in Cutephp Cutenews 2.1.2 An issue was discovered in CutePHP CuteNews 2.1.2. | 8.8 |