Top technology
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
News Script Php Pro
CRITICAL 9.8
CVE-2020-25475
SimplePHPscripts News Script PHP Pro 2.3 is affected by a SQL Injection via the id parameter in an editNews action.
Mitigation only
Fix from $2,300
2020-11-24
News Script Php Pro
MEDIUM 6.5
CVE-2020-25472
SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Request Forgery (CSRF) vulnerability, which allows attackers to add new users.
Mitigation only
Fix from $1,600
2020-11-24
News Script Php Pro
MEDIUM 6.5
CVE-2020-25473
SimplePHPscripts News Script PHP Pro 2.3 does not properly set the HttpOnly Flag from Session Cookies.
Mitigation only
Fix from $1,600
2020-11-24
News Script Php Pro
MEDIUM 6.1
CVE-2020-25474
SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Scripting (XSS) vulnerability via the editor_name parameter.
Mitigation only
Fix from $1,600
2020-11-24