2007-02-27 18:00:00
mitre
PUBLISHED
admin.php in SmartSiteCMS 1.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the userName cookie.