New eVuln Advisory: PHP SimpleNEWS, PHP SimpleNEWS MySQL - Authentication Bypass Vulnerability http://evuln.com/vulns/94/summary.html --------------------Summary---------------- eVuln ID: EV0094 Vendor: Himpfen Consulting Company Vendor's Web Site: http://www.himpfenconsulting.com/ Software: PHP SimpleNEWS, PHP SimpleNEWS MySQL Sowtware's Web Site: http://www.himpfenconsulting.com/code/php-simplenews/ Versions: 1.0.0 Critical Level: Moderate Type: Unauthorized Data Modification Class: Remote Status: Unpatched. No reply from developer(s) PoC/Exploit: Available Solution: Not Available Discovered by: Aliaksandr Hartsuyeu (eVuln.com) -----------------Description--------------- Vulnerabe script: admin.php To check if administrator logged in script use only one cookie variable: admin and dont make password comparison. --------------PoC/Exploit---------------------- Available at: http://evuln.com/vulns/94/exploit.html --------------Solution--------------------- No Patch available. --------------Credit----------------------- Discovered by: Aliaksandr Hartsuyeu (eVuln.com) Regards, Aliaksandr Hartsuyeu http://evuln.com - Penetration Testing Services .
