CVE-2007-4230

BellaBiblio is affected by a cookie-based privilege escalation where a bellabiblio cookie with the value “administrator” can grant remote admin privileges. The issue’s root cause involves cookie value validation, but this is disputed: several sources state the cookie value must be an MD5 hash rat...