Описание
delete.php in Plague News System 0.6 and earlier allows remote unauthenticated attackers to delete news, comments, and shoutbox posts by modifying the id parameter.
Ссылки
- Vendor AdvisoryURL Repurposed
- Vendor Advisory
- Vendor AdvisoryURL Repurposed
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:frozenplague.net:plague_news_system:0.4:*:*:*:*:*:*:*
cpe:2.3:a:frozenplague.net:plague_news_system:0.4rc3:*:*:*:*:*:*:*
cpe:2.3:a:frozenplague.net:plague_news_system:0.4rc4:*:*:*:*:*:*:*
cpe:2.3:a:frozenplague.net:plague_news_system:0.6:*:*:*:*:*:*:*
EPSS
Процентиль: 62%
0.00423
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
delete.php in Plague News System 0.6 and earlier allows remote unauthenticated attackers to delete news, comments, and shoutbox posts by modifying the id parameter.
EPSS
Процентиль: 62%
0.00423
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other