VULNERABILITY INTELLIGENCE
CVE-2007-3611
CVSS score9.3 NONE
EPSS probability3.27%
CISA KEVNot currently listed
Published2007-07-06
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
admin.php in VRNews 1.1.1, and possibly other 1.x versions, does not require authentication, which allows remote attackers to perform certain administrative actions via a direct request with a (1) edit, (2) add, (3) config, or (4) del value in the act parameter.
Weakness classification
- nvd@nist.gov: NVD-CWE-Other