Login Request a demo
NE
Product
Newscoop
by Sourcefabric · last CVE May 19, 2020
6
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 1Medium 0Low 0
Severity
All severities6Critical0High1Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Newscoop to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-11807
7.8
1%
May 19
Because of Unrestricted Upload of a File with a Dangerous Type, Sourcefabric Newscoop 4.4.7 allows an authenticated user to execute arbitrary PHP code (and sometimes terminal…
Affected: 4.4.7
CVE-2013-0730
–
2%
Feb 22
Multiple cross-site scripting (XSS) vulnerabilities in Newscoop 4.x through 4.1.0 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1)…
Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.1.0
CVE-2012-4679
–
2%
Aug 27
Cross-site scripting (XSS) vulnerability in admin/login.php in Newscoop before 3.5.5 allows remote attackers to inject arbitrary web script or HTML via the f_user_name parameter
Affected: through 3.5.4; 3.5.0; 3.5.1; 3.5.2; 3.5.3
CVE-2012-1935
–
3%
Aug 27
Multiple cross-site scripting (XSS) vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4.x before 4 RC4 allow remote attackers to inject arbitrary web script or HTML via the (1)…
Affected: 3.5.0; 3.5.1; 3.5.2; 3.5.3; 3.5.4; 4
CVE-2012-1934
–
3%
Aug 27
SQL injection vulnerability in admin/country/edit.php in Newscoop before 3.5.5 and 4.x before 4 RC4 allows remote attackers to execute arbitrary SQL commands via the…
Affected: 3.5.0; 3.5.1; 3.5.2; 3.5.3; 3.5.4; 4
CVE-2012-1933
–
6%
Aug 27
Multiple PHP remote file inclusion vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4 before RC4, when register_globals is enabled, allow remote attackers to execute arbitrary…
Affected: 3.5.0; 3.5.1; 3.5.2; 3.5.3; 3.5.4; 4.0
Showing 6