MySimpleNews 1.0 allows remote attackers to delete arbitrary email messages via a direct request to vider.php3.
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
Link | Tags |
---|---|
http://www.iss.net/security_center/static/10299.php | vdb entry |
http://archives.neohapsis.com/archives/bugtraq/2002-10/0027.html | mailing list exploit |