CVE-2008-7172

Exploit

EPSS 1.52%
Published 08.09.2009 10:30:01
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

Lightweight news portal (LNP) 1.0b does not properly restrict access to administrator functionality, which allows remote attackers to gain administrator privileges via direct requests to admin.php with the (1) potd_delete, (2) potd, (3) vote_update, (4) vote, or (5) modifynews actions.

Affected products Warnungen 0 Metrics 2 CWE 0 References 6

Data is provided by the National Vulnerability Database (NVD)

Yanick Bourbeau ≫ Lightweight News Portal Version1.0b

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	1.52%	0.795

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://www.securityfocus.com/bid/29848

Exploit

https://www.exploit-db.com/exploits/5873

https://exchange.xforce.ibmcloud.com/vulnerabilities/43225

https://nvd.nist.gov/vuln/detail/CVE-2008-7172

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-7172

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-7172

EUVD