high7.5Public exploit code
CVE-2008-6667
A+ PHP Scripts News Management System (NMS) allows remote attackers to bypass authentication and gain administrator privileges by setting the mobsuser and mobs…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- A+ PHP Scripts - Nms Insecure Cookie Handling2008-06-26 · webapps · php · Verified
Impact
A+ PHP Scripts News Management System (NMS) allows remote attackers to bypass authentication and gain administrator privileges by setting the mobsuser and mobspass cookies to 1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Marc Melvin | A\+ Php Scripts News Management System | All versions |