delete.php in Plague News System 0.6 and earlier allows remote unauthenticated attackers to delete news, comments, and shoutbox posts by modifying the id parameter.
Link | Tags |
---|---|
http://secunia.com/advisories/15902 | third party advisory vendor advisory |
http://dark-assassins.com/forum/viewtopic.php?t=90 | vendor advisory url repurposed |