CVE-2009-4546: globepersonnel_login.asp in Logoshows BBS 2.0 allows remote attackers to bypass authentication and gain adm...

Security readout for executives and security teams

This is an old authentication-bypass issue in Logoshows BBS 2.0. A remote attacker could gain administrative access if the vulnerable ASP login page trusts client-controlled cookie values. The public bundle does not provide a CVSS score, vendor patch, or evidence of active exploitation. Exposure is likely limited to legacy Logoshows BBS 2.0 deployments with globepersonnel_login.asp reachable by untrusted users. The source bundle does not identify broader affected products or supported versions. Prioritize if any affected legacy BBS instance remains internet-facing. Business risk is administrative takeover of an old web application, with unclear patch status and public exploit reference. Mitigation focus: Identify any Logoshows BBS 2.0 instances in the environment.; Remove or restrict public access to globepersonnel_login.asp.; Check vendor or maintainer guidance for any available upgrade or replacement path..

Prepared

Jun 28, 2026, 09:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.