CVE-2007-0261 snews.php in sNews 1.5.30 and earlier does not properly exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions, as demonstrated by changing an adm...
HighCVSS 10.0
EPSS 4.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
snews.php in sNews 1.5.30 and earlier does not properly exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions, as demonstrated by changing an administrative password via the changeup task, and by uploading PHP code via the imagefile parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| snews | = 1.5.29 | No fix listed |
| snews | = 1.5.30 | No fix listed |
References
- 32817 vdb-entry
- 23746 third-party-advisory
- 22025 vdb-entry
- snews-image-file-upload(31535) vdb-entry
- 3116 exploit