Vulnerabilities (CVE)

Filtered by vendor Katy Whitton Web Development Subscribe
Filtered by product Newscmslite
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-0091 1 Katy Whitton Web Development 1 Newscmslite 2025-04-09 7.5 HIGH N/A
newsCMSlite stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for newsCMS.mdb.