CVE-2002-1734 NewsPro 1.01 allows remote attackers to gain unauthorized administrator access by setting their authentication cookie to "logged,true".
HighCVSS 10.0
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
NewsPro 1.01 allows remote attackers to gain unauthorized administrator access by setting their authentication cookie to "logged,true".
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aspbin newspro | = 1.0.1 | No fix listed |
References
- 20020504 Security holes : PHP Image View, NewsPro, Photo DB, As_web, GuestBook mailing-list
- 4672 vdb-entry
- newspro-admin-access(9007) vdb-entry