S0nic's vulnerability footprint centers on the Paranews product, a web-based application where observed issues cluster around improper input neutralization and cross-site scripting vulnerabilities. Current exploitation activity and severity counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by S0nic over time
Signals from CVEs in this vendor scope (1 CVEs).
1 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2008-4349MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in news.php in s0nic Paranews 3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) id or (2) page param | Sep 30, 2008 | 4.3 | 21 | NO | YES |
Signals from CVEs in this vendor scope (1 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by S0nic.
Media articles that mention a CVE ID that affects a product developed by S0nic — matched by CVE ID, not by vendor name.