CVE-2008-6001

2009-01-28T15:30:00
ID CVE-2008-6001
Type cve
Reporter cve@mitre.org
Modified 2017-09-29T01:32:00

Description

index.php in ADN Forum 1.0b and earlier allows remote attackers to bypass authentication and gain sysop access via a fpusuario cookie composed of an initial sysop: string, an arbitrary password field, and a final :sysop:0 string.