Description
profileedit.php TaskDriver 1.3 and earlier allows remote attackers to bypass authentication and gain administrative access by setting the auth cookie to "fook!admin."
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by cOndemned · phpwebappsphp
https://www.exploit-db.com/exploits/7605
References (4)
Core 4
Core References
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/25221
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/33030
Exploit, Third Party Advisory exploit
x_refsource_exploit-db
https://www.exploit-db.com/exploits/7605
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/47608
Scores
EPSS
0.0166
EPSS Percentile
82.2%
Details
CWE
CWE-287
Status
published
Products (2)
taskdriver/taskdriver
1.2
taskdriver/taskdriver
< 1.3
Published
Aug 10, 2009
Tracked Since
Feb 18, 2026