CVE-2008-6664

action.php in SH-News 3.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the shuser and shpass cookies to non-zero values.

Date published : 2009-04-08

http://www.securityfocus.com/bid/29725

https://www.exploit-db.com/exploits/5829