Les News 2.2 allows remote attackers to bypass authentication and gain administrative access via a direct request for adminews/index_fr.php3, and possibly the adminews index documents for other localizations.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Les_news | Les_news | 2.2 (including) | 2.2 (including) |