CVE-2005-1583: 1two News

Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days.

1Two News 1.0 allows remote attackers to (1) delete images for new stories via a direct request to admin/delete.php or (2) upload arbitrary images via a direct request to admin/upload.php.

Affected products

• 1two 1two News: version 1.0 only

Published 2005-05-14. Last modified 2026-06-16.