Authentication flaw

2010-01-0417:30:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.4%

JSON

globepersonnel_login.asp in Logoshows BBS 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the (1) pb_username (aka pb%5Fusername) and (2) level cookies.

CPENameOperatorVersion
logoshows_bbseq2.0

CPE	Name	Operator	Version
	logoshows_bbs	eq	2.0

References

exchange.xforce.ibmcloud.com/vulnerabilities/52366

www.exploit-db.com/exploits/9400