Known Vulnerabilities for Newsbee by Newsbee Project
Listed below are 2 of the newest known vulnerabilities associated with "Newsbee" by "Newsbee Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2018-5687 json | NewsBee allows XSS via the Company Name field in the Settings under admin/admin.php. | 4.8 - MEDIUM | 2018-01-14 | 2018-02-02 |
| CVE-2017-5971 json | SQL injection vulnerability in NewsBee CMS allow remote attackers to execute arbitrary SQL commands. | 9.8 - CRITICAL | 2018-01-08 | 2018-02-01 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Newsbee Project | Newsbee | - |