high7.5Public exploit code
CVE-2008-7172
Lightweight news portal (LNP) 1.0b does not properly restrict access to administrator functionality, which allows remote attackers to gain administrator privil…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Lightweight news portal (LNP) 1.0b - Multiple Vulnerabilities2008-06-20 · webapps · php · Verified
Impact
Lightweight news portal (LNP) 1.0b does not properly restrict access to administrator functionality, which allows remote attackers to gain administrator privileges via direct requests to admin.php with the (1) potd_delete, (2) potd, (3) vote_update, (4) vote, or (5) modifynews actions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yanick Bourbeau | Lightweight News Portal | Version 1.0b |