Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.5
CVSSv2

CVE-2009-2642

Published: 28/07/2009 Updated: 19/09/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Subscribe to Desi Short Url Script

Vulnerability Summary

index.php in Desi Short URL Script 1.0 allows remote malicious users to bypass authentication by setting the logged cookie to 1 and the uid cookie to an integer value, as demonstrated by a value of 13.

Vulnerable Product Search on Vulmon Subscribe to Product

desiscripts desi short url script 1.0

Exploits

Exploit DB: Desi Short URL Script - (Authentication Bypass) Insecure Cookie Handling
Desi Short URL Insecure Cookie Handling Vulnerability Discovered By:N@bilX Home:ma-exploitcom /m4r0c-s3curitycc email:eyx@hotmailcom Not: jib L3az Wla Khaz [ma] -------------------- download:webscriptssoftpediacom/script/Miscellaneous/Desi-Short-Url-Script-42484html exploit: *** javascript:documentcookie = "logged =1"; javascript:doc ...

References

CWE-287http://www.exploit-db.com/exploits/8925https://nvd.nist.govhttps://www.exploit-db.com/exploits/8925/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-29895injectCVE-2023-52689CVE-2024-5049CVE-2024-5051privilege escalationphysicalCVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook