CVE-2008-6714
admin.php in xeCMS 1.0.0 RC2 and earlier allows remote attackers to bypass authentication and access the admin panel by setting the xecms_username cookie.
Published: 2009-04-10 · CVSS: Unscored
admin.php in xeCMS 1.0.0 RC2 and earlier allows remote attackers to bypass authentication and access the admin panel by setting the xecms_username cookie.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7