high7.5Public exploit code
CVE-2009-4927
WB News 2.1.2 allows remote attackers to bypass authentication and gain administrative access via a modified WBNEWS cookie, as demonstrated by setting this coo…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WB News 2.1.2 - Insecure Cookie Handling2009-04-20 · webapps · php · Verified
Impact
WB News 2.1.2 allows remote attackers to bypass authentication and gain administrative access via a modified WBNEWS cookie, as demonstrated by setting this cookie to 1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webmobo | Wbnews | Version 2.1.2 |