index.php in ADN Forum 1.0b and earlier allows remote attackers to bypass authentication and gain sysop access via a fpusuario cookie composed of an initial sysop: string, an arbitrary password field, and a final :sysop:0 string.
Max CVSS
7.5
EPSS Score
1.86%
Published
2009-01-28
Updated
2017-09-29
1 vulnerabilities found