← Database

CVE-2009-2558

HIGH CVSS: 7.5 Published: 2009-07-21 Modified: 2026-06-16

Description

system/message.php in Admin News Tools 2.5 does not properly restrict access, which allows remote attackers to post news messages via a direct request.

Affected Platforms

Adminnewstools Admin News Tools

Weakness Type

CWE-264

References