CVE-2003-0588 admin.php in Digi-news 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that...
HighCVSS 10.0
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
admin.php in Digi-news 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| digi-fx digi-news | = 1.1 | No fix listed |