← Back to CVE List

CVE-2020-8510

Published: 2020-02-03T15:15Z
Last Modified: 2024-11-21T05:38Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
An issue was discovered in phpABook 0.9 Intermediate. On the login page, if one sets a userInfo cookie with the value of admin+1+en (user+perms+lang), one can login as any user without a password. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt