EUVD-2007-0803

Malware in sbrugna...

Authentication flaw

Les News 2.2 allows remote attackers to bypass authentication and gain administrative access via a direct request for adminews/indexfr.php3, and possibly the adminews index documents for other localizations...

CVE-2007-0806

Les News 2.2 contains an authentication bypass vulnerability (CVE-2007-0806) that lets remote attackers bypass login and potentially obtain administrative access by requesting adminews/index_fr.php3 directly (and possibly related localized index documents). The NVD entry cites an impact of partia...