CVE-2008-4203: Czaries Czarnews

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

SQL injection vulnerability in cn_users.php in CzarNews 1.20 and earlier allows remote attackers to execute arbitrary SQL commands via a recook cookie.

Affected products

• Czaries Czarnews: up to and including 1.20; version 1.12 only; version 1.13 only; version 1.14 only

Published 2008-09-24. Last modified 2026-06-16.