Description
admin.php in SmartSiteCMS 1.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the userName cookie.
References
- 20769 third-party-advisory
- 20060809 SmartSiteCMS v1.0 authentication bypass mailing-list
- smartsitecms-admin-auth-bypass(28299) vdb-entry
- 19434 vdb-entry