CVE:CVE-2006-2636
CNNVD:CNNVD-200605-528
Katy Whitton NewsCMSLite中的newsadmin.asp可以使远程攻击者通过将loggedIn cookie设为"xY1zZoPQ"来绕过认证并获得管理访问权。
solution:Upgrade katy_whitton newscmslite to a higher version than *