CVE-2008-4752

TlNews 2.2 contains an authentication bypass: remote attackers can gain administrative access by setting the tlNews_login cookie to admin. The flaw allows bypass of login via cookie manipulation, enabling admin privileges. The CVE entry cites a base score of 7.5 (HIGH) under CVSS v2.0 with networ...