Unscored CVE-2004-2689 EUVD-2004-2679GHSA-2v5r-gc72-7xcw

NewsPHP allows remote attackers to gain unauthorized administrative access by setting a cookie to the "autorized=admin; root=admin" value.

Published Oct 6, 2007 · Updated Aug 8, 2024 · Assigned by mitre

Description

NewsPHP allows remote attackers to gain unauthorized administrative access by setting a cookie to the "autorized=admin; root=admin" value.

References

newsphp-gain-admin-access(15836) vdb-entry
11346 third-party-advisory
1009740 vdb-entry
20040415 Re: XSS, Admin Access via Cookie and File Upload vulnerability in NewsPHP. mailing-list