Unscored CVE-2007-1160 EUVD-2007-1157GHSA-97p9-9xph-wfxf

webSPELL 4.0, and possibly later versions, allows remote attackers to bypass authentication via a ws_auth cookie, a different vulnerability…

Published Feb 28, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

webSPELL 4.0, and possibly later versions, allows remote attackers to bypass authentication via a ws_auth cookie, a different vulnerability than CVE-2006-4782.

References

2337 third-party-advisory
33143 vdb-entry
20070222 WebSpell > 4.0 Authentication Bypass and arbitrary code execution mailing-list