Description
BellaBiblio allows remote attackers to gain administrative privileges via a bellabiblio cookie with the value "administrator." NOTE: this issue is disputed by CVE and multiple third parties because the cookie value must be an MD5 hash
References
- 39032 vdb-entry
- 20070731 WTF: BellaBiblio Admin Login Bypass mailing-list
- 2991 third-party-advisory
- 25140 vdb-entry
- 20070730 BellaBiblio Admin Login Bypass mailing-list
- 20070731 WTF: BellaBiblio Admin Login Bypass mailing-list
- 20070731 WTF: BellaBiblio Admin Login Bypass mailing-list