TI-2007-00252 CVE-2007-0261 · GHSA-p5x6-4c84-ww2p
snews.php in sNews 1.5.30 and earlier does not properly exit when authentication fails…
Priority MEDIUM 50
snews.php in sNews 1.5.30 and earlier does not properly exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions, as demonstrated by changing an administrative password…