Description
user.php in NextBBS 0.6 allows remote attackers to bypass authentication and gain administrator access by setting the userkey cookie to 1.
References
- [oss-security] 20120329 Re: CVE-request: NextBBS 0.6.0 waraxe-2012-SA#080 mailing-list
- 80626 vdb-entry
- 52728 vdb-entry
- 20120327 [waraxe-2012-SA#080] - Multiple Vulnerabilities in NextBBS 0.6.0 mailing-list
- http://www.waraxe.us/advisory-80.html
- http://packetstormsecurity.org/files/111250/NextBBS-0.6.0-Authentication-Bypass-SQL-Injection-XSS.html
- [oss-security] 20120329 CVE-request: NextBBS 0.6.0 waraxe-2012-SA#080 mailing-list