high7.5Public exploit code
CVE-2009-0864
S-Cms 1.1 Stable allows remote attackers to bypass authentication and obtain administrative access via an OK value for the login cookie.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- S-CMS 1.1 Stable - Insecure Cookie Handling / Mass Page Delete2009-02-17 · webapps · php · Verified
Impact
S-Cms 1.1 Stable allows remote attackers to bypass authentication and obtain administrative access via an OK value for the login cookie.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Matteoiammarrone | S-Cms | Version 1.1 |