CVE-2009-2557

The vulnerability CVE-2009-2557 affects Admin News Tools 2.5, with a directory traversal flaw in system/download.php that permits reading arbitrary files via a .. sequence in the fichier parameter. This is described across multiple sources (NVD entry for CVE-2009-2557 and OpenVAS detail for Admin...

CVE-2009-2558

CVE-2009-2558 affects Admin News Tools 2.5. The vulnerability is a failure to properly restrict access in system/message.php, enabling remote attackers to post news messages via a direct request. NVD lists a CVSSv2 base score of 7.5 (High) with NETWORK attack vector, LOW attack complexity, and pa...