Description
Entertainment CMS allows remote attackers to bypass authentication and perform certain administrative actions by setting the adminLogged cookie to "Administrator."
References
- 20070710 Entertainment CMS Admin Login Bypass mailing-list
- 24847 vdb-entry
- 26016 third-party-advisory
- entertainment-index-security-bypass(35330) vdb-entry
- 2878 third-party-advisory
- 37908 vdb-entry