TI-2008-06353 CVE-2008-6664 · GHSA-896r-2cff-955paction.php in SH-News 3.0 allows remote attackers to bypass authentication and gain…Priority LOW 38action.php in SH-News 3.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the shuser and shpass cookies to non-zero values.CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02511 · Published 2009-04-08 · No fix listed CWE-287