CVE-2004-2689

NewsPHP allows remote attackers to gain unauthorized administrative access by setting a cookie to the "autorized=admin; root=admin" value.
Configurations

Configuration 1 (hide)

cpe:2.3:a:newsphp:newsphp:*:*:*:*:*:*:*:*

History

20 Nov 2024, 23:53

Type Values Removed Values Added
References () http://archives.neohapsis.com/archives/bugtraq/2004-04/0161.html - () http://archives.neohapsis.com/archives/bugtraq/2004-04/0161.html -
References () http://secunia.com/advisories/11346 - Vendor Advisory () http://secunia.com/advisories/11346 - Vendor Advisory
References () http://securitytracker.com/alerts/2004/Apr/1009740.html - () http://securitytracker.com/alerts/2004/Apr/1009740.html -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/15836 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/15836 -

Information

Published : 2004-12-31 05:00

Updated : 2024-11-20 23:53


NVD link : CVE-2004-2689

Mitre link : CVE-2004-2689

CVE.ORG link : CVE-2004-2689


JSON object : View

Products Affected

newsphp

  • newsphp
CWE
CWE-264

Permissions, Privileges, and Access Controls