CVE-2008-6714: Xecms Project Xecms

High severity, CVSS 7.5. EPSS: 12% chance of exploitation in the next 30 days.

admin.php in xeCMS 1.0.0 RC2 and earlier allows remote attackers to bypass authentication and access the admin panel by setting the xecms_username cookie.

Affected products

Published 2009-04-10. Last modified 2026-06-16.