high7.5Public exploit code
CVE-2009-1489
includes/user.php in Fungamez RC1 allows remote attackers to bypass authentication and gain administrative access by setting the user cookie parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- fungamez rc1 - Authentication Bypass / Local File Inclusion2009-04-20 · webapps · php · Verified
Impact
includes/user.php in Fungamez RC1 allows remote attackers to bypass authentication and gain administrative access by setting the user cookie parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rens Rikkerink | Fungamez | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=124025031126068&w=2
- http://www.vupen.com/english/advisories/2009/1117
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50424
- https://www.exploit-db.com/exploits/8493
- http://marc.info/?l=bugtraq&m=124025031126068&w=2
- http://www.vupen.com/english/advisories/2009/1117
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50424
- https://www.exploit-db.com/exploits/8493