Description
admin.php in Himpfen Consulting Company PHP SimpleNEWS 1.0.0 allows remote attackers to bypass authentication by setting the admin parameter in a cookie.
References
- simplenews-admin-bypass-security(25177) vdb-entry
- 17186 vdb-entry
- 613 third-party-advisory
- 20060322 [eVuln] PHP SimpleNEWS, PHP SimpleNEWS MySQL - Authentication Bypass Vulnerability mailing-list
- http://evuln.com/vulns/94/summary.html
- 23803 vdb-entry
- ADV-2006-0913 vdb-entry
- 19195 third-party-advisory