7.5

CVE-2009-0412

EPSS 1.55%
Veröffentlicht 03.02.2009 20:30:00
Zuletzt bearbeitet 16.06.2026 23:04:59
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

The ProcessLogin function in class.auth.php in Interspire Shopping Cart (ISC) 4.0.1 Ultimate edition allows remote attackers to bypass authentication and obtain administrative access by reusing the RememberToken cookie after a failed admin login attempt.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 7

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Interspire ≫ Shopping Cart Version4.0.1

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.55%	0.718

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://www.securityfocus.com/archive/1/499967/100/0/threaded

http://www.securityfocus.com/bid/33212

http://www.securitytracker.com/id?1021557

https://exchange.xforce.ibmcloud.com/vulnerabilities/47899

https://nvd.nist.gov/vuln/detail/CVE-2009-0412

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-0412

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-0412

EUVD