Security Advisory
CVE-2012-1602
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
user.php in NextBBS 0.6 allows remote attackers to bypass authentication and gain administrator access by setting the userkey cookie to 1.