CVE-2009-4671

2010-03-0518:00:00

mitre

www.cve.org

7 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.4%

JSON

Login.php in RoomPHPlanning 1.6 allows remote attackers to bypass authentication and obtain administrative access by setting the room_phplanning cookie to a value associated with the admin account.

References

secunia.com/advisories/35237

www.exploit-db.com/exploits/8797