Adminnewstools - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2009-07-21.

Products

• Admin News Tools - 2 CVEs

Newest CVEs of Adminnewstools

• CVE-2009-2557 - CVSS 5 (medium), 2009-07-21: Directory traversal vulnerability in system/download.php in Admin News Tools 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the…
• CVE-2009-2558 - CVSS 7.5 (high), 2009-07-21: system/message.php in Admin News Tools 2.5 does not properly restrict access, which allows remote attackers to post news messages via a direct request.