CVE mentions, exploit signals, and PoC evidence in one fast public view.
Vendor/product archive
3 CVEs tagged to snewscms / snews — 1 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.
Snews CMS 1.7 contains an unrestricted file upload vulnerability that allows unauthenticated attackers to upload arbitrary files including PHP executables to the snews_files direc…
Snews CMS 1.7 contains a cross-site request forgery vulnerability that allows attackers to change administrator credentials without authentication by crafting malicious HTML forms…
A Cross-Site Scripting (XSS) vulnerability exists in the reorder administrator functions in sNews 1.71.