high7.5Public exploit code
CVE-2009-4987
admin/header.php in Scripteen Free Image Hosting Script 2.3 allows remote attackers to bypass authentication and gain administrative access by setting the cook…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Scripteen Free Image Hosting Script 2.3 - Insecure Cookie Handling2009-07-24 · webapps · php · Verified
Impact
admin/header.php in Scripteen Free Image Hosting Script 2.3 allows remote attackers to bypass authentication and gain administrative access by setting the cookgid cookie value to 1, a different vector than CVE-2008-3211.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Scripteen | Free Image Hosting Script | Version 2.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/36002
- http://www.exploit-db.com/exploits/9256
- http://www.osvdb.org/56539
- http://www.securityfocus.com/bid/35801
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51996
- http://secunia.com/advisories/36002
- http://www.exploit-db.com/exploits/9256
- http://www.osvdb.org/56539
- http://www.securityfocus.com/bid/35801
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51996