Description
inc_login_check.asp ACS Blog 0.8 through 1.1.3 allows remote attackers to gain administrator privileges via the "in" value in a cookie.
References
- 15787 vdb-entry
- 1013795 vdb-entry
- 15105 third-party-advisory
- 20050423 ACSblog bug mailing-list