C-news.fr C-news — known CVE vulnerabilities

Every CVE whose affected-product data names C-news.fr C-news, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2006-4629 — CVSS 7.5 (high): PHP remote file inclusion vulnerability in affichage/commentaires.php in C-News.fr C-News 1.0.1 and earlier allows remote attackers to…
• CVE-2006-4639 — CVSS 5.1 (medium): Multiple PHP remote file inclusion vulnerabilities in C-News.fr C-News 1.0.1 and earlier, when register_globals is enabled, allow remote…
• CVE-2008-2219 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in install.php in C-News.fr C-News 1.0.1 allows remote attackers to inject arbitrary web script or…