Security Advisory
CVE-2008-6001
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
index.php in ADN Forum 1.0b and earlier allows remote attackers to bypass authentication and gain sysop access via a fpusuario cookie composed of an initial sysop: string, an arbitrary password field, and a final :sysop:0 string.