Posted by Bkis on May 11
1. General Information
sNews is a free content management system (CMS) written in PHP and MySQL. It is available at http://snewscms.com/. In
April 2011, Bkis Security discovered an XSS (Cross-site Scripting) vulnerability in sNews CMS version 1.7.1. Taking
advantage of this vulnerability, hacker might execute malicious code or get cookie of CMS’s administrator.
Details: http://security.bkis.com/snews-1-7-1-xss-vulnerability/
SVRT Advisory:…
