TI-2007-03502 CVE-2007-3611 · GHSA-68fg-4qvx-c25f
admin.php in VRNews 1.1.1, and possibly other 1.x versions, does not require…
Priority MEDIUM 46
admin.php in VRNews 1.1.1, and possibly other 1.x versions, does not require authentication, which allows remote attackers to perform certain administrative actions via a direct request with a (1) edit, (2) add, (3) conf…