CVE-2009-2558: Adminnewstools Admin News Tools

High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days.

system/message.php in Admin News Tools 2.5 does not properly restrict access, which allows remote attackers to post news messages via a direct request.

Affected products

• Adminnewstools Admin News Tools: version 2.5 only

Published 2009-07-21. Last modified 2026-06-16.