7.5
CVSSv2

CVE-2009-1587

Published: 07/05/2009 Updated: 29/09/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

index.php in PHP Site Lock 2.0 allows remote malicious users to bypass authentication and obtain administrative access by setting the login_id, group_id, login_name, user_id, and user_type cookies to certain values.

Vulnerable Product Search on Vulmon Subscribe to Product

kalptarudemos php site lock 2.0

Exploits

-------------------------------------[+] Homepage:wwwkalptarudemoscom Product: PHP Site Lock 20 home:wwwh4ckf0rucom ------------------------------------- PHP Site Lock 20 Insecure Cookie Handling Vuln ------------------------------------- Exploit: -------- 1)javascript:documentcookie="login_id=0;path=/"; 1)javascript:documentcookie= ...