Vulnerabilities

TI-2008-06860 CVE-2008-7172 · GHSA-3985-49x3-qw6r

Lightweight news portal (LNP) 1.0b does not properly restrict access to administrator…

LOW 37

Lightweight news portal (LNP) 1.0b does not properly restrict access to administrator functionality, which allows remote attackers to gain administrator privileges via direct requests to admin.php with the (1) potd_delet…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02287 Published 2009-09-08 No fix listed CWE-264

TI-2008-06859 CVE-2008-7171 · GHSA-4r4q-86p7-2mpq

Multiple cross-site scripting (XSS) vulnerabilities in Lightweight news portal (LNP) 1.0b…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Lightweight news portal (LNP) 1.0b allow remote attackers to inject arbitrary web script or HTML via the (1) photo parameter to show_photo.php, (2) potd parameter to…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01445 Published 2009-09-08 No fix listed CWE-79

Vulnerabilities

Filters

Lightweight news portal (LNP) 1.0b does not properly restrict access to administrator…

Multiple cross-site scripting (XSS) vulnerabilities in Lightweight news portal (LNP) 1.0b…