← Database

CVE-2001-0972

CRITICAL CVSS: 10.0 Published: 2001-08-31 Modified: 2026-06-16

Description

Surf-Net ASP Forum before 2.30 uses easily guessable cookies based on the UserID, which allows remote attackers to gain administrative privileges by calculating the value of the admin cookie (UserID 1), i.e. "0888888."

Affected Platforms

Surf-Net Asp Forum

Weakness Type

NVD-CWE-Other

References