CVE-2009-4546

globepersonnellogin.asp in Logoshows BBS 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the 1 pbusername aka pb%5Fusername and 2 level cookies...

CVE-2009-4546

The CVE-2009-4546 entry affects Logoshows BBS 2.0, specifically the globepersonnel_login.asp authentication page. The vulnerability allows remote attackers to bypass authentication and gain administrative access by manipulating cookies (pb_username and level). This corresponds to a cookie-based a...