CVE-2005-4006

SAPID CMS versions before 1.2.3.03 are vulnerable to an authentication bypass via direct requests to usr/system files (insert_file.php, insert_image.php, insert_link.php, insert_qcfile.php, edit.php). The issue enables remote attackers to bypass authentication and potentially obtain unauthorized ...