Bugtraq mailing list archives
[eVuln.com] Cookie Auth Bypass in Hot Links SQL
From: bt () evuln com
Date: 18 Nov 2010 23:22:35 -0000
New eVuln Advisory: Cookie Auth Bypass in Hot Links SQL http://evuln.com/vulns/140/summary.html -----------------------[ Summary ]------------------------- eVuln ID: EV0140 Software: Hot Links SQL 3 Vendor: Mrcgiguy Version: 3.2.0 Critical Level: high Type: Authentication Bypass Status: Unpatched. No reply from developer(s) PoC: Available Solution: Not available Discovered by: Aliaksandr Hartsuyeu ( http://evuln.com/ ) -----------------------[ Description ]---------------------- Cookie Auth Bypass vulnerability found in Hot Links SQL 3. It is possible to get access to admin panel without password comparison. --------PoC/Exploit-------- PoC code is available at http://evuln.com/vulns/140/exploit.html -----------------------[ Solution ]------------------------- Not available -----------------------[ Credit ]--------------------------- Vulnerability discovered by Aliaksandr Hartsuyeu http://evuln.com/tools.html - Web Security Tools
Current thread:
- [eVuln.com] Cookie Auth Bypass in Hot Links SQL bt (Nov 19)