NewsPro 1.01 allows remote malicious users to gain unauthorized administrator access by setting their authentication cookie to "logged,true".
aspbin newspro 1.0.1