CVE

Id
39668  
CVE No.
CVE-2009-2233  
Status
Candidate  
Description
The admin interface in AWScripts.com Gallery Search Engine 1.5 allows remote attackers to bypass authentication and gain administrative access by setting the awse_logged cookie to 1.  
Phase
Assigned (20090626)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
436188 39668 CVE-2009-2233 MILW0RM:8994  View
436189 39668 CVE-2009-2233 URL:http://www.milw0rm.com/exploits/8994  View
436190 39668 CVE-2009-2233 SECUNIA:35513  View
436191 39668 CVE-2009-2233 URL:http://secunia.com/advisories/35513  View
436192 39668 CVE-2009-2233 VUPEN:ADV-2009-1649  View
436193 39668 CVE-2009-2233 URL:http://www.vupen.com/english/advisories/2009/1649  View
436194 39668 CVE-2009-2233 XF:gallerysearch-cookie-security-bypass(51276)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43762 JVNDB-2009-004769 Drupal 用の Views Buld Operations モジュールにおけるアクセス制限を回避される脆弱性 Drupal 用の Views Buld Operations モジュールは、登録されたプロシージャに関する処理に不備があるため、アクセス制限を回避される、および "ノードまたはノードのクラス" を変更される脆弱性が存在します。 CVE-2009-2237 39668 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004769.html  View