← Back

Vrnews

vrnews

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Vrnews
vrnews

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Vrnews
1Vrnews
Apr 23, 2026
Jul 6, 2007
N/A· v4
N/A· v3
9.3 HIGH· v2
admin.php in VRNews 1.1.1, and possibly other 1.x versions, does not require authentication, which allows remote attackers to perform certain administrative actions via a direct request with a (1) edit, (2) add, (3) conf...Show more
admin.php in VRNews 1.1.1, and possibly other 1.x versions, does not require authentication, which allows remote attackers to perform certain administrative actions via a direct request with a (1) edit, (2) add, (3) config, or (4) del value in the act parameter.Show less