| Package | Affected versions | Patched versions |
|---|---|---|
| x-news | = 1.0= 1.1 |
X-News (x_news) 1.1 and earlier allows attackers to authenticate as other users by obtaining the MD5 checksum of the password, e.g. via sniffing or the users.txt data file, and providing it in a cookie.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free