Описание
WB News 2.1.2 allows remote attackers to bypass authentication and gain administrative access via a modified WBNEWS cookie, as demonstrated by setting this cookie to 1.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:webmobo:wbnews:2.1.2:*:*:*:*:*:*:*
EPSS
Процентиль: 82%
0.01693
Низкий
7.5 High
CVSS2
Дефекты
CWE-287
Связанные уязвимости
github
почти 4 года назад
WB News 2.1.2 allows remote attackers to bypass authentication and gain administrative access via a modified WBNEWS cookie, as demonstrated by setting this cookie to 1.
EPSS
Процентиль: 82%
0.01693
Низкий
7.5 High
CVSS2
Дефекты
CWE-287