CVE-2008-1904

CVE-2008-1904 affects CcMail 1.0.1 and earlier. The root cause is that the application does not verify that the this_cookie cookie corresponds to an authenticated session, allowing remote attackers to obtain access to the admin area by modifying the this_cookie cookie. The NVD entry documents thi...