CVE-2008-6667: Marc Melvin A+ PHP Scripts News Management System

High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days.

A+ PHP Scripts News Management System (NMS) allows remote attackers to bypass authentication and gain administrator privileges by setting the mobsuser and mobspass cookies to 1.

Affected products

• Marc Melvin A+ PHP Scripts News Management System: affected versions not specified

Published 2009-04-08. Last modified 2026-06-16.