Description
MicroNews allows remote attackers to bypass authentication and gain administrative privileges via a direct request to admin.php.
References
- 20080115 MicroNews Admin Direct Access vulnerability mailing-list
- 27288 vdb-entry
- micronews-admin-authentication-bypass(39702) vdb-entry
- 3556 third-party-advisory