CVE-2007-3611 | BDVDB-2026-25147 Detail

Description#

admin.php in VRNews 1.1.1, and possibly other 1.x versions, does not require authentication, which allows remote attackers to perform certain administrative actions via a direct request with a (1) edit, (2) add, (3) config, or (4) del value in the act parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.exploit-db.com/exploits/4150
https://exchange.xforce.ibmcloud.com/vulnerabilities/35271
http://osvdb.org/45787

Exploit#

https://www.exploit-db.com/exploits/4150

History#

Version 12007-07-06Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.