CVE-2004-2689 NewsPHP allows remote attackers to gain unauthorized administrative access by setting a cookie to the "autorized=admin; root=admin" value.
HighCVSS 10.0
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
NewsPHP allows remote attackers to gain unauthorized administrative access by setting a cookie to the "autorized=admin; root=admin" value.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| newsphp | All versions | No fix listed |
References
- 20040415 Re: XSS, Admin Access via Cookie and File Upload vulnerability in NewsPHP. mailing-list
- 11346 third-party-advisory vendor-advisory
- 1009740 vdb-entry
- newsphp-gain-admin-access(15836) vdb-entry