VULHUB ™

mcNews is a set of scripts for allowing users to post news stories on a webpage. It will run on most Linux and Unix variants as well as Microsoft Windows operating systems. mcNews does not sufficiently validate the information contained within cookie-based authentication credentials. As a result, it is trivial for a remote attacker to falsify an administrative cookie which will be accepted as a valid authentication credential.

mcNews is a set of scripts for allowing users to post news stories on a webpage. It will run on most Linux and Unix variants as well as Microsoft Windows operating systems. mcNews does not sufficiently validate the information contained within cookie-based authentication credentials. As a result, it is trivial for a remote attacker to falsify an administrative cookie which will be accepted as a valid authentication credential.