CVEvulnerability
CVE-2002-2319
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-94
Description
Static code injection vulnerability in users.php in MySimpleNews allows remote attackers to inject arbitrary PHP code and HTML via the (1) LOGIN, (2) DATA, and (3) MESS parameters, which are inserted into news.php3.
Affected configurations
• mysimplenews mysimplenews 1.0
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2002-10/0027.html Exploit
- http://www.iss.net/security_center/static/10296.php www.iss.net
- http://www.securityfocus.com/bid/5865 Exploit
- http://archives.neohapsis.com/archives/bugtraq/2002-10/0027.html Exploit
- http://www.iss.net/security_center/static/10296.php www.iss.net
- http://www.securityfocus.com/bid/5865 Exploit