Total vulnerabilities in the database
CuteNews 1.4.1 and possibly other versions allows remote attackers to obtain the installation path via unspecified vectors involving an invalid file path.
| Software | From | Fixed in |
|---|---|---|
| cutephp / cutenews | 1.3.6 | 1.3.6.x |
| cutephp / cutenews | 1.3.2 | 1.3.2.x |
| cutephp / cutenews | 0.88 | 0.88.x |
| cutephp / cutenews | 1.3 | 1.3.x |
| cutephp / cutenews | - | 1.4.1.x |
| cutephp / cutenews | 1.4.0 | 1.4.0.x |
| cutephp / cutenews | 1.3.1 | 1.3.1.x |