Stphp maintains a narrowly scoped product portfolio centered on the Easynews usenet client application. The observed vulnerability disclosures reflect application-level issues; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Stphp over time
Signals from CVEs in this vendor scope (3 CVEs).
3 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2006-6866HIGH STphp EasyNews PRO 4.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames, email addresses, and pas | Dec 31, 2006 | 7.8 | 29 | NO | YES |
CVE-2007-3331MEDIUM Cross-site request forgery (CSRF) vulnerability in STphp EasyNews PRO 4.0 allows remote attackers to change the admin password via (1) a certain HTML form that is posted automatica | Jun 21, 2007 | 5.0 | 15 | NO | NO |
CVE-2007-3330MEDIUM Cross-site scripting (XSS) vulnerability in STphp EasyNews PRO 4.0 allows remote attackers to inject arbitrary web script or HTML via a news post, which is stored in news/ without | Jun 21, 2007 | 4.3 | 14 | NO | NO |
Signals from CVEs in this vendor scope (3 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Stphp.
Media articles that mention a CVE ID that affects a product developed by Stphp — matched by CVE ID, not by vendor name.