high7.5
CVE-2002-2046
x_news.php in X-News (x_news) 1.1 and earlier allows remote attackers to gain administrative privileges by stealing and replaying the md5_password cookie.
Impact
x_news.php in X-News (x_news) 1.1 and earlier allows remote attackers to gain administrative privileges by stealing and replaying the md5_password cookie.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xqus | X-News | Version 1.1 |