The remote host is running TowerBlog, a single-user content management system, written in PHP. Due to design error, an attacker may be granted administrative privileges by requesting the page '/?x=admin' while setting a cookie whose value is 'TowerBlog_LoggedIn=1'.

Disable this software

• http://www.securiteam.com/unixfocus/5VP0G0KFFK.html

---

Updated on 2015-03-25