globepersonnel_login.asp in Logoshows BBS 2.0 allows remote malicious users to bypass authentication and gain administrative access by setting the (1) pb_username (aka pb%5Fusername) and (2) level cookies.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
logoshows logoshows bbs 2.0 |