Vulnerability in 1two News

CVE-2005-1583

1Two News 1.0 allows remote attackers to (1) delete images for new stories via a direct request to admin/delete.php or (2) upload arbitrary images via a direct request to admin/upload.php.

EPSS: 0.011 (62.9th percentile) — read the EPSS interpretation.

Affected products

1two 1two_news — versions 1.0
N/a — versions n/a

References

cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_SECTRACK, Vendor Advisory)