| Max CVSS | 5.0 | Min CVSS | 5.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-1340 | 5.0 |
CuteNews 1.4.1 and possibly other versions allows remote attackers to obtain the installation path via unspecified vectors involving an invalid file path. Successful exploitation requires that the "register_globals" parameter is enabled.
|
18-10-2018 - 16:32 | 21-03-2006 - 02:06 | |
| CVE-2006-1339 | 5.0 |
Directory traversal vulnerability in inc/functions.inc.php in CuteNews 1.4.1 and possibly other versions, when register_globals is enabled, allows remote attackers to include arbitrary files via a .. (dot dot) sequence and trailing NULL (%00) byte in
|
18-10-2018 - 16:32 | 21-03-2006 - 02:06 |