Exploitation Summary
EIP tracks 2 public exploits for CVE-2009-0461. PoCs published by Stack.
AI-analyzed exploit summary This exploit demonstrates an insecure cookie handling vulnerability in WholeHogSoftware Ware Support, allowing an attacker to set an admin cookie via JavaScript to bypass authentication.
Description
Whole Hog Password Protect: Enhanced 1.x allows remote attackers to bypass authentication and obtain administrative access via an integer value in the adminid cookie.
Exploits (2)
This exploit demonstrates an insecure cookie handling vulnerability in WholeHogSoftware Ware Support, allowing an attacker to set an admin cookie via JavaScript to bypass authentication.
This exploit demonstrates an insecure cookie handling vulnerability in WholeHogSoftware's Password Protect script. By setting the 'adminid' cookie to '8', an attacker can bypass authentication and gain admin access.