Vulnerability Description
admin.php in Digi-ads 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Digi-Fx | Digi-News | 1.1 |
References
FAQ
What is CVE-2003-0589?
CVE-2003-0589 is a vulnerability with a CVSS score of 10.0 (HIGH). admin.php in Digi-ads 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that ...
How severe is CVE-2003-0589?
CVE-2003-0589 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2003-0589?
Check the references section above for vendor advisories and patch information. Affected products include: Digi-Fx Digi-News.