This host is running N-13 News and is prone to Cross-Site Request Forgery vulnerability.

Successful exploitation will allow attacker to execute arbitrary script code, perform cross-site scripting attacks, Web cache poisoning, and other malicious activities. Impact Level: Application.

Upgrade to N-13 News version 4.0.2 or later. For updates refer to http://code.google.com/p/n-13news/

The flaw is caused by an improper validation of user-supplied input by the 'admin.php' script, which allows remote attackers to send a specially crafted HTTP request to add an administrative user.

N-13 News version 3.4, 3.7 and 4.0

• http://secunia.com/advisories/42959
• http://www.exploit-db.com/exploits/16013/
• http://xforce.iss.net/xforce/xfdb/64824

---

Updated on 2015-03-25