Lightweight News Portal

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:yanick_bourbeau:lightweight_news_portal:1.0b:*:*:*:*:*:*:*

part: a version: 1.0b update: *

VendorYanick Bourbeau (567d842e-62f3-5cc1-a29f-5c27bf457ffb)
ProductLightweight News Portal (8fb68a3e-3f24-517b-bcb9-47f739ed91e3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-7172 vulnerable 2026-06-08 04:51:05.808898 Details available
Lightweight news portal (LNP) 1.0b does not properly restrict access to administrator functionality, which allows remote attackers to gain administrator privileges via direct requests to admin.php with the (1) potd_delete, (2) potd, (3) vote_update, (4) vote, or (5) modifynews actions.
Published: 2009-09-08T10:00:00.000Z
Updated: 2024-08-07T11:56:14.377Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-7171 vulnerable 2026-06-08 04:51:05.808486 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Lightweight news portal (LNP) 1.0b allow remote attackers to inject arbitrary web script or HTML via the (1) photo parameter to show_photo.php, (2) potd parameter to show_potd.php, or (3) the Current question field in a vote action to admin.php.
Published: 2009-09-08T10:00:00.000Z
Updated: 2024-08-07T11:56:14.400Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.