CGI-Bug: News Update 1.1 administration password bug

["Morpheus[bd]" <morpheusbd () GMX NET>]

Hi,

there is a vulnerability in News Update 1.1 ((c) by CGIScriptCenter) which
allows malicious user to change the news administration password without
knowing the correct (former)password. For further information take a look at
the attached package, including an advisory and a proof-of-concept exploit.

Ciao,
Morpheus[bd]
www: www.brightdarkness.de
mailto: morpheusbd () gmx net

Attachment: newsexp.tar.gz
Description: