cbcvebase.

Yarck Sh-News vulnerabilities

1 known vulnerability affecting yarck/sh-news.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2008-6664P3HIGHCVSS 7.5PoCv3.02009-04-08
CVE-2008-6664 [HIGH] CWE-287 CVE-2008-6664: action.php in SH-News 3.0 allows remote attackers to bypass authentication and gain administrator pr action.php in SH-News 3.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the shuser and shpass cookies to non-zero values.
nvd
Yarck Sh-News vulnerabilities | cvebase