high7.5Public exploit code
CVE-2009-2558
system/message.php in Admin News Tools 2.5 does not properly restrict access, which allows remote attackers to post news messages via a direct request.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Admin News Tools - Remote Contents Change2009-07-15 · webapps · php · Verified
Impact
system/message.php in Admin News Tools 2.5 does not properly restrict access, which allows remote attackers to post news messages via a direct request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adminnewstools | Admin News Tools | Version 2.5 |