3 matches found
Authentication flaw
Bloginator 1A allows remote attackers to bypass authentication and gain administrative access by setting the identifyYourself cookie...
CVE-2009-1050
Bloginator 1A allows remote attackers to bypass authentication and gain administrative access by setting the identifyYourself cookie...
CVE-2009-1050
Bloginator 1A is affected by two issues observed in the provided documents. First, remote attackers can bypass authentication by manipulating the identifyYourself cookie, gaining administrative access. This is caused by improper validation of the authentication cookie in the login flow (articleCa...