Filtered by vendor Adminnewstools Subscriptions
Filtered by product Admin News Tools Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2009-2558 1 Adminnewstools 1 Admin News Tools 2024-11-21 N/A
system/message.php in Admin News Tools 2.5 does not properly restrict access, which allows remote attackers to post news messages via a direct request.
CVE-2009-2557 1 Adminnewstools 1 Admin News Tools 2024-11-21 N/A
Directory traversal vulnerability in system/download.php in Admin News Tools 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the fichier parameter.