default.asp in ASP-Nuke Community 1.5 and earlier allows remote attackers to gain privileges by setting certain pseudo cookie values.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Asp-nuke | Asp-nuke | 1.0 (including) | 1.0 (including) |
| Asp-nuke | Asp-nuke | 1.2 (including) | 1.2 (including) |
| Asp-nuke | Asp-nuke | 1.3 (including) | 1.3 (including) |
| Asp-nuke | Asp-nuke | 1.5 (including) | 1.5 (including) |
| Asp-nuke | Asp-nuke | rc1 (including) | rc1 (including) |
| Asp-nuke | Asp-nuke | rc2 (including) | rc2 (including) |
| Asp-nuke | Asp-nuke | rc3 (including) | rc3 (including) |