vendor:
Unclassified NewsBoard
by:
girex
7.5
CVSS
HIGH
Multiple remote vulnerabilities
CWE
Product Name: Unclassified NewsBoard
Affected Version From: 1.6.2004
Affected Version To:
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested:
2009
Unclassified NewsBoard Remote Vulnerabilities
The Unclassified NewsBoard 1.6.4 (and maybe lower) CMS is affected by multiple remote vulnerabilities, including remote SQL injection, logs file disclosure, local file inclusion/remote command execution, and full path disclosure.
Mitigation:
Upgrade to a newer version of the CMS that addresses these vulnerabilities. Ensure that php.ini settings are properly configured.
