CVE-2007-0806

Les News 2.2 allows remote attackers to bypass authentication and gain administrative access via a direct request for adminews/indexfr.php3, and possibly the adminews index documents for other localizations...