Newsscript Administrative Privilege Elevation Vulnerability

This may be exploited with a web browser. The member may add a database delimiter when changing their name in addition to a new privilege level, for example:

Peter<~>2


 

Privacy Statement
Copyright 2010, SecurityFocus