2009-02-11 17:25:00
mitre
PUBLISHED
win/content/upload.php in Goople CMS 1.7 allows remote attackers to bypass authentication and gain administrative access by setting the loggedin cookie to 1.