CVE-2006-2636: Katy Whitton Newscmslite

High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days.

newsadmin.asp in Katy Whitton NewsCMSLite allows remote attackers to bypass authentication and gain administrative access by setting the loggedIn cookie to "xY1zZoPQ".

Affected products

• Katy Whitton Newscmslite: any version

Published 2006-05-30. Last modified 2026-06-16.