CVE-2008-7172

published 2009-09-08

CVE-2008-7172: Lightweight news portal (LNP) 1.0b does not properly restrict access to administrator functionality, which allows remote attackers to gain administrator…

Priority P3 49 high 7.5 CVSS 2.0

AV N AC L Au N C P I P A P

EXPLOIT

Lightweight news portal (LNP) 1.0b does not properly restrict access to administrator functionality, which allows remote attackers to gain administrator privileges via direct requests to admin.php with the (1) potd_delete, (2) potd, (3) vote_update, (4) vote, or (5) modifynews actions.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
yanick_bourbeau	lightweight_news_portal	—	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-264