Teraway LinkTracker 1.0 allows remote attackers to bypass authentication and gain administrative access via a userid=1&lvl=1 value for the twLTadmin cookie.
References
Link | Resource |
---|---|
http://secunia.com/advisories/34903 | Vendor Advisory |
http://www.securityfocus.com/bid/34735 | Exploit |
https://www.exploit-db.com/exploits/8550 |
Configurations
History
No history.
Information
Published : 2009-05-12 16:30
Updated : 2023-12-10 10:51
NVD link : CVE-2009-1617
Mitre link : CVE-2009-1617
CVE.ORG link : CVE-2009-1617
JSON object : View
Products Affected
teraway
- linktracker
CWE
CWE-287
Improper Authentication