Authentication Bypass Vulnerability in News Manager Lite 2.5

CVE-2004-1847 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

News Manager Lite 2.5 allows remote attackers to bypass authentication and gain administrator privileges by setting the ADMIN parameter in the NEWS_LOGIN cookie.

Learn more about our Web Application Penetration Testing UK.