high7.5Public exploit code
CVE-2009-0460
Whole Hog Ware Support 1.x allows remote attackers to bypass authentication and obtain administrative access via an integer value in the adminid cookie.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WholeHogSoftware Password Protect - Insecure Cookie Handling2009-02-03 · webapps · php · Verified
- WholeHogSoftware Ware Support - Insecure Cookie Handling2009-02-03 · webapps · php · Verified
Impact
Whole Hog Ware Support 1.x allows remote attackers to bypass authentication and obtain administrative access via an integer value in the adminid cookie.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wholehogsoftware | Ware Support | Version 1.0 |