Description
VSNS Lemon 3.2.0 allows remote attackers to bypass authentication and access password-protected articles by setting the vsns[topic_id] cookie to the targeted topic.
References
- 1015836 vdb-entry
- 20060406 [eVuln] VSNS Lemon Multiple Vulnerabilities mailing-list
- vsns-lemon-cookie-auth-bypass(25459) vdb-entry
- 17396 vdb-entry
- http://evuln.com/vulns/106/description.html
- 24213 vdb-entry
- 19420 third-party-advisory