CVE-2006-2636

newsadmin.asp in Katy Whitton NewsCMSLite allows remote attackers to bypass authentication and gain administrative access by setting the loggedIn cookie to "xY1zZoPQ".

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

3.63% chance of exploitation in the next 30 days, 89th percentile

Published

2006-05-30

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/32760

References

• CVE Record
• NVD entry

Related

• CVE-2006-2635
• CVE-2006-2638
• CVE-2006-2631
• CVE-2006-2645
• CVE-2006-2630
• CVE-2006-2646