CVE-2008-7172

Published: Sep 8, 2009Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Lightweight news portal (LNP) 1.0b does not properly restrict access to administrator functionality, which allows remote attackers to gain administrator privileges via direct requests to admin.php with the (1) potd_delete, (2) potd, (3) vote_update, (4) vote, or (5) modifynews actions.

Affected (1)

Products: Yanick Bourbeau: Lightweight News Portal

Yanick Bourbeau

1 product

Lightweight News Portal

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Yanick Bourbeau Lightweight News Portal	Version 1.0b

Related CWEs

References (6)

http://www.securityfocus.com/bid/29848

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/43225

Source: cve@mitre.org

https://www.exploit-db.com/exploits/5873

Source: cve@mitre.org

http://www.securityfocus.com/bid/29848

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/43225

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/5873

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.