Lucene search

K
seebugRootSSV:78868
HistoryJul 01, 2014 - 12:00 a.m.

NewsScript Access Validation Vulnerability

2014-07-0100:00:00
Root
www.seebug.org
7

No description provided by source.


                                                source: http://www.securityfocus.com/bid/12761/info

NewsScript is reported prone to an access validation vulnerability. This issue may allow an unauthorized attacker to add, modify and delete messages.

It is reported that an attacker can exploit this issue by issuing a specially crafted HTTP GET request for the 'newsscript.pl' script to bypass access checks and carry out administrative tasks. 

www.example.com/newsscript.pl?mode=admin