high7.5
CVE-2006-7074
admin.php in SmartSiteCMS 1.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the userName cookie.
Impact
admin.php in SmartSiteCMS 1.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the userName cookie.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Smartsitecms | Smartsitecms | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://marc.info/?l=full-disclosure&m=115510147417471&w=2
- http://secunia.com/advisories/20769
- http://www.securityfocus.com/bid/19434
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28299
- http://marc.info/?l=full-disclosure&m=115510147417471&w=2
- http://secunia.com/advisories/20769
- http://www.securityfocus.com/bid/19434
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28299