CVE-2006-3553 PlaNet Concept planetNews allows remote attackers to bypass authentication and execute arbitrary code via a direct request to news/admin/planetnews.php.
HighCVSS 10.0
EPSS 6.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PlaNet Concept planetNews allows remote attackers to bypass authentication and execute arbitrary code via a direct request to news/admin/planetnews.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| planet concept planetnews | All versions | No fix listed |
References
- 1222 third-party-advisory
- 1016385 exploit vdb-entry
- 20060626 Planetnews Authecnication Admin ByPass mailing-list
- planetnews-admin-security-bypass(27419) vdb-entry