CVE:CVE-2009-4262
CNNVD:CNNVD-200912-137
Harold Bakker's Newscript HB-NS中存在权限许可和访问控制漏洞。远程攻击者可借助对admin.php的直接请求获得对管理员控制面板的访问。
solution:Upgrade haroldbakker hb-ns to a higher version than 1.3,and avoid the version 1.3