Description
An issue was discovered in phpABook 0.9 Intermediate. On the login page, if one sets a userInfo cookie with the value of admin+1+en (user+perms+lang), one can login as any user without a password.
Unscored
CVE-2020-8510
EUVD-2020-29376GHSA-gm98-pmgw-v2qw
An issue was discovered in phpABook 0.9 Intermediate. On the login page, if one sets a userInfo cookie with the value of admin+1+en (user+p…
Published Feb 3, 2020 · Updated Aug 4, 2024 · Assigned by mitre