Newsscript - Access Validation

Author: adrianc23@gmail.com
type: webapps
platform: cgi
port: 
date_added: 2005-03-08 
date_updated: 2013-05-04 
verified: 1 
codes: CVE-2005-0735;OSVDB-15731 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/12761/info

NewsScript is reported prone to an access validation vulnerability. This issue may allow an unauthorized attacker to add, modify and delete messages.

It is reported that an attacker can exploit this issue by issuing a specially crafted HTTP GET request for the 'newsscript.pl' script to bypass access checks and carry out administrative tasks.

www.example.com/newsscript.pl?mode=admin