critical9.8
CVE-2020-8510
An issue was discovered in phpABook 0.9 Intermediate.
Impact
An issue was discovered in phpABook 0.9 Intermediate. On the login page, if one sets a userInfo cookie with the value of admin+1+en (user+perms+lang), one can login as any user without a password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpabook Project | Phpabook | Version 0.9 |