Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown
CVE-2020-25472
Disclosure Date: November 24, 2020 (last updated February 22, 2025)
SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Request Forgery (CSRF) vulnerability, which allows attackers to add new users.
0
Attacker Value
Unknown
CVE-2020-25473
Disclosure Date: November 24, 2020 (last updated February 22, 2025)
SimplePHPscripts News Script PHP Pro 2.3 does not properly set the HttpOnly Flag from Session Cookies.
0
Attacker Value
Unknown
CVE-2020-25474
Disclosure Date: November 24, 2020 (last updated February 22, 2025)
SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Scripting (XSS) vulnerability via the editor_name parameter.
0
Attacker Value
Unknown
CVE-2020-25475
Disclosure Date: November 24, 2020 (last updated February 22, 2025)
SimplePHPscripts News Script PHP Pro 2.3 is affected by a SQL Injection via the id parameter in an editNews action.
0
