CVE-2009-4671

Login.php in RoomPHPlanning 1.6 allows remote attackers to bypass authentication and obtain administrative access by setting the roomphplanning cookie to a value associated with the admin account...

CVE-2009-4671

CVE-2009-4671 affects RoomPHPlanning 1.6. Login.php accepts a room_phplanning cookie value tied to the admin account, enabling remote authentication bypass and administrative access. The NVD entry lists a base score of 7.5 (HIGH) with network attack vector and no authentication required; impact i...

CVE-2009-4671

creationtimestamp| type| source ---|---|--- 2009-05-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8797...