CVE-2008-5497

The CVE-2008-5497 entry concerns BandSite CMS version 1.1.4. The connected documents provide concrete detail: remote attackers can bypass authentication and gain administrative access by setting the login_auth cookie to true, yielding full admin control. This describes a cookie-based auth bypass ...