CVE-2009-1739

PAD Site Scripts 3.6 is vulnerable to an authentication bypass: remote attackers can set the authuser cookie parameter to a valid username and gain privileges as other users, including administrative rights. The vulnerability arises from how the authuser value is trusted for authentication, enabl...