high7.5Public exploit code
CVE-2009-2642
index.php in Desi Short URL Script 1.0 allows remote attackers to bypass authentication by setting the logged cookie to 1 and the uid cookie to an integer valu…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Desi Short URL Script - (Authentication Bypass) Insecure Cookie Handling2009-06-10 · webapps · php · Verified
Impact
index.php in Desi Short URL Script 1.0 allows remote attackers to bypass authentication by setting the logged cookie to 1 and the uid cookie to an integer value, as demonstrated by a value of 13.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Desiscripts | Desi Short Url Script | Version 1.0 |