CVEvulnerability
CVE-2008-7172
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-09-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
Lightweight news portal (LNP) 1.0b does not properly restrict access to administrator functionality, which allows remote attackers to gain administrator privileges via direct requests to admin.php with the (1) potd_delete, (2) potd, (3) vote_update, (4) vote, or (5) modifynews actions.
Affected configurations
• yanick bourbeau lightweight news portal 1.0b
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/bid/29848 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43225 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5873 www.exploit-db.com
- http://www.securityfocus.com/bid/29848 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43225 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5873 www.exploit-db.com