source: wwwsecurityfocuscom/bid/12761/info
NewsScript is reported prone to an access validation vulnerability This issue may allow an unauthorized attacker to add, modify and delete messages
It is reported that an attacker can exploit this issue by issuing a specially crafted HTTP GET request for the 'newsscriptpl' script to bypass ac ...