CVE-2007-0261 | BDVDB-2026-21593 Detail

Description#

snews.php in sNews 1.5.30 and earlier does not properly exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions, as demonstrated by changing an administrative password via the changeup task, and by uploading PHP code via the imagefile parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/31535
http://www.securityfocus.com/bid/22025
http://secunia.com/advisories/23746
https://www.exploit-db.com/exploits/3116
http://osvdb.org/32817

Exploit#

https://www.exploit-db.com/exploits/3116

History#

Version 12007-01-16Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.