SiteCubed MailWorks Professional Authentication Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11095/info MailWorks Professional is reported prone to an authentication bypass vulnerability. The application uses cookies to store variables that determine the status of the authentication process. An attacker browsing...

CVE-2004-1661

MailWorks Professional is affected by CVE-2004-1661, where remote attackers can bypass authentication and gain privileges using a cookie containing auth=1 and uId=1. The issue enables partial confidentiality and integrity/availability impact per the NVD CVSS2 metrics (AV:N, AC:L, Au:N, C:P, I:P, ...

CVE-2004-1661

MailWorks Professional allows remote attackers to bypass authentication and gain privileges via a cookie that contains "auth=1" and "uId=1."...

CVE-2004-1661: Undefined Security Weakness

MailWorks Professional allows remote attackers to bypass authentication and gain privileges via a cookie that contains "auth=1" and "uId=1."...

MailWorks.txt

Pimp industries. "Its all about the Bling, B^!%@s and Fame!" MailWorks Professional All versions Authentication bypass via cookie control C Paul Craig - Pimp Industries 2004 Background ------------- MailWorks Professional is a mailing list management application, developed by sitecubed. It provid...

MailWorks Professional - Authentication bypass

Pimp industries. "Its all about the Bling, B^!@s and Fame!" MailWorks Professional All versions Authentication bypass via cookie control C Paul Craig - Pimp Industries 2004 Background ------------- MailWorks Professional is a mailing list management application, developed by sitecubed. It provide...

CVE-2004-1661

MailWorks Professional allows remote attackers to bypass authentication and gain privileges via a cookie that contains "auth=1" and "uId=1."...

SiteCubed MailWorks Professional - Authentication Bypass

source: https://www.securityfocus.com/bid/11095/info MailWorks Professional is reported prone to an authentication bypass vulnerability. The application uses cookies to store variables that determine the status of the authentication process. An attacker browsing the web application using speciall...