[Full-disclosure] ANSA editorial system vulnerable

["Rosario Valotta" <rosario.valotta@xxxxxxxxx>]

ANSA is the greatest italian press agency. It has offices and employees all
around the world.
ANSA provides news to all main italian news aggregators and information web
sites.
ANSA is "trusted".
ANSA editorial web portal is vulnerable, it lacks the basic security
principles.
Everyone with a small knowledge of webapps security can sneak into ANSA
system and read/WRITE (fake) news.
As the system is "trusted" a very cunning and well written news will pass
the human supervision and be published online on ansa.it portal.
Details (in italian for the now) at rosario.valotta.googlepages.com

After notification, ANSA IT department has solved the issues.

Regards,
Rosario Valotta

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/