← Database

CVE-2009-4927

HIGH CVSS: 7.5 Published: 2010-07-12 Modified: 2026-06-16

Description

WB News 2.1.2 allows remote attackers to bypass authentication and gain administrative access via a modified WBNEWS cookie, as demonstrated by setting this cookie to 1.

Affected Platforms

Webmobo Wbnews

Weakness Type

CWE-287

References