CVE-2002-0539

Demarc PureSecure 1.05 is affected by a SQL injection vulnerability in the session ID stored in the s_key cookie, enabling remote attackers to gain administrative privileges. The available sources describe the flaw as a remote authentication bypass via SQL injection affecting the session identifi...

CVE-2002-0539

Demarc PureSecure 1.05 allows remote attackers to gain administrative privileges via a SQL injection attack in a session ID that is stored in the skey cookie...