Anirbandutta9 News-buzz vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Anirbandutta9 News-buzz: 2 record(s), with affected versions and fixes.
cpe:2.3:a:anirbandutta9:news-buzz

CVE-2025-15197 High · 7.2 CWE-284 Dec 29, 2025

code-projects/anirbandutta9 Content Management System/News-Buzz editposts.php unrestricted upload

A security flaw has been discovered in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. This vulnerability affects unknown code of the file /admin/editposts.php. Performing manipulation of the argument image results in unrestricted upload. The attack may be initiated remotely. The exploit has been released to the public and may be exploited.

CVE-2023-38913 Medium · 5.3 CWE-89 Dec 15, 2025

SQL Injection in Anirbandutta9 News-buzz

SQL injection vulnerability in anirbandutta9 NEWS-BUZZ v.1.0 allows a remote attacker to execute arbitrary code via a crafted script.