MicroNews Admin Direct Access vulnerability

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: MicroNews Admin Direct Access vulnerability
From: xcross87@xxxxxxxxx
Date: 15 Jan 2008 15:33:33 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

# MicroNews Authentication Bypass
# Homepage: http://phptoys.com/
# Download: http://www.phptoys.com/download.php?view.31
# Found by Xcross87 | xcross87.info | hcegroup.net

Simply access news input 
http://[site]/[path]/admin.php
[^$^] Enjoy !
# - by Xcross - #

Prev by Date: Max's File Uploader File Upload Vulnerability
Next by Date: Pipe to FOR Crashes CMD
Previous by thread: Max's File Uploader File Upload Vulnerability
Next by thread: Pipe to FOR Crashes CMD
Index(es):
- Date
- Thread