CVE-2009-2736: Sun-Jester Opennews

Medium severity, CVSS 6.5. EPSS: 4.8% chance of exploitation in the next 30 days.

Static code injection vulnerability in admin.php in sun-jester OpenNews 1.0 allows remote authenticated administrators to inject arbitrary PHP code into config.php via the "Overall Width" field in a setconfig action.

Affected products

• Sun-Jester Opennews: version 1.0 only

Published 2009-08-11. Last modified 2026-06-16.