Authentication flaw

2010-07-1213:27:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.8%

JSON

WB News 2.1.2 allows remote attackers to bypass authentication and gain administrative access via a modified WBNEWS cookie, as demonstrated by setting this cookie to 1.

CPENameOperatorVersion
wbnewseq2.1.2

CPE	Name	Operator	Version
	wbnews	eq	2.1.2

References

secunia.com/advisories/34822

www.securityfocus.com/bid/34609

www.exploit-db.com/exploits/8492