Unscored CVE-2003-0589 EUVD-2003-0583GHSA-rr6w-c957-wqqh

admin.php in Digi-ads 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administra…

Published Oct 17, 2016 · Updated Aug 8, 2024 · Assigned by mitre

Description

admin.php in Digi-ads 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password.

References

20030716 Digi-news and Digi-ads version 1.1 admin access without password mailing-list