| Package | Affected versions | Patched versions |
|---|---|---|
| phpfastnews | = 1.0.0 |
The isLoggedIn function in fastnews-code.php in phpFastNews 1.0.0 allows remote attackers to bypass authentication and gain administrative access by setting the fn-loggedin cookie to 1.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free