CVE-2002-2046

xnews.php in X-News xnews 1.1 and earlier allows remote attackers to gain administrative privileges by stealing and replaying the md5password cookie...