CVE-2005-0735

NewsScript - Unauthenticated Privilege Escalation via Mode Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-0735. PoCs published by [email protected].

AI-analyzed exploit summary The provided text describes an access validation vulnerability in NewsScript, allowing unauthorized administrative actions via a crafted HTTP GET request. No actual exploit code is present, only a description of the vulnerability and exploitation method.

Description

newsscript.pl for NewsScript allows remote attackers to gain privileges by setting the mode parameter to admin.

Exploits (1)

exploitdb WRITEUP VERIFIED
by [email protected] · textwebappscgi
https://www.exploit-db.com/exploits/25201

The provided text describes an access validation vulnerability in NewsScript, allowing unauthorized administrative actions via a crafted HTTP GET request. No actual exploit code is present, only a description of the vulnerability and exploitation method.

Classification
Writeup 80%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Theoretical
Target: NewsScript (version unspecified)
No auth needed
Prerequisites: Access to the target web application
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/12761

Scores

EPSS 0.0767
EPSS Percentile 94.0%

Details

CWE
CWE-264
Status published
Products (1)
newsscript.co.uk/newsscript
Published May 02, 2005
Tracked Since Feb 18, 2026