CVE-2020-5558 - CuteNews 2.0.1 allows remote authenticated attackers to execute arbitrary PHP code via unspecified vectors

HIGH

CuteNews 2.0.1 allows remote authenticated attackers to execute arbitrary PHP code via unspecified vectors

Published Mar 25, 2020

8.8

HIGH

CVSS 3.1

EPSS 2.05%

CuteNews 2.0.1 allows remote authenticated attackers to execute arbitrary PHP code via unspecified vectors.

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
CutePHP.com	CuteNews	unknown	Affected 2.0.1

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26720		Advisory
https://jvn.jp/en/jp/JVN58176087/index.html		x_refsource_MISCThird Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner jpcert

Published Mar 25, 2020

Updated Aug 4, 2024

Reserved Jan 6, 2020

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner jpcert

Published Mar 25, 2020

Updated Aug 4, 2024

GitHub

No data