Description
PlaNet Concept planetNews allows remote attackers to bypass authentication and execute arbitrary code via a direct request to news/admin/planetnews.php.
References
- 20060626 Planetnews Authecnication Admin ByPass mailing-list
- planetnews-admin-security-bypass(27419) vdb-entry
- 1222 third-party-advisory
- 1016385 vdb-entry