Harold Bakker's NewsScript (HB-NS) 1.3 allows remote attackers to obtain access to the admin control panel via a direct request to admin.php.Referenceshttp://www.packetstormsecurity.org/0912-exploits/hbns-admin.txthttps://exchange.xforce.ibmcloud.com/vulnerabilities/54518