• info
• discussion
• exploit
• solution
• references

Magic News Plus Administrator Password Change Vulnerability

No exploit is required.

The following proof of concept exploit is available:

• /data/vulnerabilities/exploits/MagicNewsPlus-pw-change.pl