7.5

CVE-2009-1638

Exploit
Techno Dreams Job Career Package 3.0 allows remote attackers to bypass authentication and obtain administrative access by setting the JobCareerAdmin cookie to Login.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
T-dreams ≫ Job Career Package Version3.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.62% 0.834
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://osvdb.org/54278
Exploit
http://secunia.com/advisories/34996
Vendor Advisory
http://www.securityfocus.com/bid/34865
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/50370
https://www.exploit-db.com/exploits/8627