Lucene search
Newsscript - Access Validation
Show more
| Reporter | Title | Published | Views | Family All 6 |
|---|---|---|---|---|
 | CVE-2005-0735 | 13 Mar 200505:00 | – | cvelist |
 | CVE-2005-0735 | 2 May 200504:00 | – | cve |
| CVE-2005-0727 | 2 May 200504:00 | – | cve |
 | NewsScript newsscript.pl mode Parameter Privilege Escalation | 10 Mar 200500:00 | – | nessus |
 | CVE-2005-0735 | 2 May 200504:00 | – | nvd |
| CVE-2005-0727 | 2 May 200504:00 | – | nvd |
source: https://www.securityfocus.com/bid/12761/info
NewsScript is reported prone to an access validation vulnerability. This issue may allow an unauthorized attacker to add, modify and delete messages.
It is reported that an attacker can exploit this issue by issuing a specially crafted HTTP GET request for the 'newsscript.pl' script to bypass access checks and carry out administrative tasks.
www.example.com/newsscript.pl?mode=admin Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo08 Mar 2005 00:00Current
7.4High risk
Vulners AI Score7.4