CVE-2009-0460

Whole Hog Ware Support 1.x allows remote attackers to bypass authentication and obtain administrative access via an integer value in the adminid cookie.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2009-02-10

Last modified

2024-08-07

Weaknesses

CWE-287

Affected products

• Ware Support (Wholehogsoftware)

References

• http://osvdb.org/51734
• http://secunia.com/advisories/33777
• http://www.securityfocus.com/bid/33577
• https://www.exploit-db.com/exploits/7951