CVE-2009-0412

The CVE-2009-0412 entry concerns Interspire Shopping Cart (ISC) 4.0.1 Ultimate edition. The vulnerability exists in the ProcessLogin function of class.auth.php and allows remote attackers to bypass authentication and gain administrative access by reusing the RememberToken cookie after a failed ad...