Yanick Bourbeau

Lightweight News Portal

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2008-7171

Exploit
  • EPSS 1.15%
  • Published 08.09.2009 10:30:01
  • Last modified 09.04.2025 00:30:58

Multiple cross-site scripting (XSS) vulnerabilities in Lightweight news portal (LNP) 1.0b allow remote attackers to inject arbitrary web script or HTML via the (1) photo parameter to show_photo.php, (2) potd parameter to show_potd.php, or (3) the Cur...

7.5

CVE-2008-7172

Exploit
  • EPSS 1.52%
  • Published 08.09.2009 10:30:01
  • Last modified 09.04.2025 00:30:58

Lightweight news portal (LNP) 1.0b does not properly restrict access to administrator functionality, which allows remote attackers to gain administrator privileges via direct requests to admin.php with the (1) potd_delete, (2) potd, (3) vote_update, ...