Design/Logic Flaw

2009-12-1016:30:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

75.0%

Harold Bakker’s NewsScript (HB-NS) 1.3 allows remote attackers to obtain access to the admin control panel via a direct request to admin.php.

CPENameOperatorVersion
hb-nseq1.3

CPE	Name	Operator	Version
	hb-ns	eq	1.3

References

www.packetstormsecurity.org/0912-exploits/hbns-admin.txt

exchange.xforce.ibmcloud.com/vulnerabilities/54518