Beveiligingsadvies

CVE-2003-0588

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2016-10-17 04:00:00
Laatst bijgewerkt 2024-08-08 01:58:11
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

admin.php in Digi-news 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password.