← Database

CVE-2008-4622

HIGH CVSS: 7.5 Published: 2008-10-21 Modified: 2026-06-16

Description

The isLoggedIn function in fastnews-code.php in phpFastNews 1.0.0 allows remote attackers to bypass authentication and gain administrative access by setting the fn-loggedin cookie to 1.

Affected Platforms

Phpfastnews Phpfastnews

Weakness Type

CWE-287

References